Vulnerability Details CVE-2009-1758
The hypervisor_callback function in Xen, possibly before 3.4.0, as applied to the Linux kernel 2.6.30-rc4, 2.6.18, and probably other versions allows guest user applications to cause a denial of service (kernel oops) of the guest OS by triggering a segmentation fault in "certain address ranges."
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 70.3%
CVSS Severity
CVSS v2 Score 5.0
References
- http://lists.xensource.com/archives/html/xen-devel/2009-05/msg00561.html
- http://secunia.com/advisories/35093
- http://secunia.com/advisories/35298
- http://www.debian.org/security/2009/dsa-1809
- http://www.openwall.com/lists/oss-security/2009/05/14/2
- http://www.securityfocus.com/bid/34957
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10313
- http://lists.xensource.com/archives/html/xen-devel/2009-05/msg00561.html
- http://secunia.com/advisories/35093
- http://secunia.com/advisories/35298
- http://www.debian.org/security/2009/dsa-1809
- http://www.openwall.com/lists/oss-security/2009/05/14/2
- http://www.securityfocus.com/bid/34957
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10313
Products affected by CVE-2009-1758
-
cpe:2.3:a:xen:xen:*
-
cpe:2.3:a:xen:xen:2.0
-
cpe:2.3:a:xen:xen:3.0.2
-
cpe:2.3:a:xen:xen:3.0.3
-
cpe:2.3:a:xen:xen:3.0.4
-
cpe:2.3:a:xen:xen:3.1.2
-
cpe:2.3:a:xen:xen:3.1.3
-
cpe:2.3:a:xen:xen:3.1.4
-
cpe:2.3:a:xen:xen:3.2
-
cpe:2.3:a:xen:xen:3.2.0
-
cpe:2.3:a:xen:xen:3.2.1
-
cpe:2.3:a:xen:xen:3.2.2
-
cpe:2.3:a:xen:xen:3.2.3
-
cpe:2.3:a:xen:xen:3.3.0
-
cpe:2.3:o:linux:linux_kernel:2.6.18
-
cpe:2.3:o:linux:linux_kernel:2.6.30