xen: denial of service
| Package(s): | xen | CVE #(s): | CVE-2013-1918 CVE-2013-1952 | ||||||||||||||||||||||||||||||||||||||||
| Created: | May 13, 2013 | Updated: | July 19, 2013 | ||||||||||||||||||||||||||||||||||||||||
| Description: | From the Debian advisory:
CVE-2013-1918: (XSA 45) Several long latency operations are not preemptible Some page table manipulation operations for PV guests were not made preemptible, allowing a malicious or buggy PV guest kernel to mount a denial of service attack affecting the whole system. CVE-2013-1952: (XSA 49) VT-d interrupt remapping source validation flaw for bridges Due to missing source validation on interrupt remapping table entries for MSI interrupts set up by bridge devices, a malicious domain with access to such a device, can mount a denial of service attack affecting the whole system. | ||||||||||||||||||||||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||||||||||||||||||||||