CVE-2011-1780

Published: Jan 7, 2014Modified: Apr 29, 2026

6.1

Vector

AV:A/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 6.5 / Impact: 6.9

Source: NVD

Description

The instruction emulation in Xen 3.0.3 allows local SMP guest users to cause a denial of service (host crash) by replacing the instruction that causes the VM to exit in one thread with a different instruction in a different thread.

Affected (1)

Products: Xen: Xen

Xen

1 product

Xen

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Xen Xen	Version 3.0.3

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (8)

http://rhn.redhat.com/errata/RHSA-2011-1065.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2011-1163.html

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2011/07/07/3

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=702657

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2011-1065.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2011-1163.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2011/07/07/3

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=702657

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.