Vulnerability Details CVE-2011-2519
Xen in the Linux kernel, when running a guest on a host without hardware assisted paging (HAP), allows guest users to cause a denial of service (invalid pointer dereference and hypervisor crash) via the SAHF instruction.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 34.6%
CVSS Severity
CVSS v2 Score 5.5
References
- http://rhn.redhat.com/errata/RHSA-2011-1212.html
- http://www.openwall.com/lists/oss-security/2011/08/30/1
- http://xenbits.xen.org/hg/xen-3.1-testing.hg/rev/15644
- https://bugzilla.redhat.com/show_bug.cgi?id=718882
- http://rhn.redhat.com/errata/RHSA-2011-1212.html
- http://www.openwall.com/lists/oss-security/2011/08/30/1
- http://xenbits.xen.org/hg/xen-3.1-testing.hg/rev/15644
- https://bugzilla.redhat.com/show_bug.cgi?id=718882
Products affected by CVE-2011-2519
-
cpe:2.3:o:redhat:enterprise_linux_desktop:5.0
-
cpe:2.3:o:redhat:enterprise_linux_server:5.0
-
cpe:2.3:o:redhat:enterprise_linux_workstation:5.0
-
cpe:2.3:o:xen:xen:-
-
cpe:2.3:o:xen:xen:3.0.2
-
cpe:2.3:o:xen:xen:3.0.3
-
cpe:2.3:o:xen:xen:3.0.4
-
cpe:2.3:o:xen:xen:3.1.3
-
cpe:2.3:o:xen:xen:3.1.4
-
cpe:2.3:o:xen:xen:3.2.0
-
cpe:2.3:o:xen:xen:3.2.1
-
cpe:2.3:o:xen:xen:3.2.2
-
cpe:2.3:o:xen:xen:3.2.3