Denial Of Service (DoS)

2020-04-1001:03:08

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

46.6%

JSON

xen is vulnerable to denial of service (DoS). The vulnerability exists as a buffer overflow flaw was found in the Xen hypervisor SCSI subsystem emulation. An unprivileged, local guest user could provide a large number of bytes that are used to zero out a fixed-sized buffer via a SAI READ CAPACITY SCSI command, overwriting memory and causing the guest to crash.

CPENameOperatorVersion
xeneq3.0.3__120.el5
xeneq3.0.3__105.el5_5.3
xeneq3.0.3__64.el5_2.3
xeneq3.0.3__105.el5_5.4
xeneq3.0.3__64.el5
xeneq3.0.3__120.el5_6.1
xeneq3.0.3__64.el5_2.9
xeneq3.0.3__41.el5
xeneq3.0.3__41.el5_1.5
xeneq3.0.3__25.0.4.el5

Name	Operator	Version
xen	eq	3.0.3__120.el5
xen	eq	3.0.3__105.el5_5.3
xen	eq	3.0.3__64.el5_2.3
xen	eq	3.0.3__105.el5_5.4
xen	eq	3.0.3__64.el5
xen	eq	3.0.3__120.el5_6.1
xen	eq	3.0.3__64.el5_2.9
xen	eq	3.0.3__41.el5
xen	eq	3.0.3__41.el5_1.5
xen	eq	3.0.3__25.0.4.el5