Vulnerability Details CVE-2019-17345
An issue was discovered in Xen 4.8.x through 4.11.x allowing x86 PV guest OS users to cause a denial of service because mishandling of failed IOMMU operations causes a bug check during the cleanup of a crashed guest.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 23.4%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 4.9
References
- http://www.openwall.com/lists/oss-security/2019/10/25/4
- http://xenbits.xen.org/xsa/advisory-291.html
- https://seclists.org/bugtraq/2020/Jan/21
- https://www.debian.org/security/2020/dsa-4602
- https://xenbits.xen.org/xsa/advisory-291.html
- http://www.openwall.com/lists/oss-security/2019/10/25/4
- http://xenbits.xen.org/xsa/advisory-291.html
- https://seclists.org/bugtraq/2020/Jan/21
- https://www.debian.org/security/2020/dsa-4602
- https://xenbits.xen.org/xsa/advisory-291.html
Products affected by CVE-2019-17345
-
cpe:2.3:o:debian:debian_linux:10.0
-
cpe:2.3:o:debian:debian_linux:9.0
-
cpe:2.3:o:xen:xen:4.10.0
-
cpe:2.3:o:xen:xen:4.10.1
-
cpe:2.3:o:xen:xen:4.10.2
-
cpe:2.3:o:xen:xen:4.10.3
-
cpe:2.3:o:xen:xen:4.10.4
-
cpe:2.3:o:xen:xen:4.11.0
-
cpe:2.3:o:xen:xen:4.11.1
-
cpe:2.3:o:xen:xen:4.11.2
-
cpe:2.3:o:xen:xen:4.8.0
-
cpe:2.3:o:xen:xen:4.8.1
-
cpe:2.3:o:xen:xen:4.8.2
-
cpe:2.3:o:xen:xen:4.8.3
-
cpe:2.3:o:xen:xen:4.8.4
-
cpe:2.3:o:xen:xen:4.8.5
-
cpe:2.3:o:xen:xen:4.9.0
-
cpe:2.3:o:xen:xen:4.9.1
-
cpe:2.3:o:xen:xen:4.9.2
-
cpe:2.3:o:xen:xen:4.9.3
-
cpe:2.3:o:xen:xen:4.9.4