CVE-2011-1898

Published: Aug 12, 2011Modified: Apr 29, 2026

7.4

Vector

AV:A/AC:M/Au:S/C:C/I:C/A:C

Exploitability: 4.4 / Impact: 10.0

Source: NVD

Description

Xen 4.1 before 4.1.1 and 4.0 before 4.0.2, when using PCI passthrough on Intel VT-d chipsets that do not have interrupt remapping, allows guest OS users to gain host OS privileges by "using DMA to generate MSI interrupts by writing to the interrupt injection registers."

Affected (3)

Products: Citrix: Xen

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Citrix Xen	Version 4.0.0
Citrix Xen	Version 4.0.1
Citrix Xen	Version 4.1.0

Related CWEs

References (16)

http://lists.fedoraproject.org/pipermail/package-announce/2011-June/062112.html

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2011-June/062139.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00017.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00018.html

Source: cve@mitre.org

http://theinvisiblethings.blogspot.com/2011/05/following-white-rabbit-software-attacks.html

Source: cve@mitre.org

http://www.invisiblethingslab.com/resources/2011/Software%20Attacks%20on%20Intel%20VT-d.pdf

Source: cve@mitre.org

Exploit

http://xen.1045712.n5.nabble.com/Xen-security-advisory-CVE-2011-1898-VT-d-PCI-passthrough-MSI-td4390298.html

Source: cve@mitre.org

http://xen.org/download/index_4.0.2.html

Source: cve@mitre.org

Patch

http://lists.fedoraproject.org/pipermail/package-announce/2011-June/062112.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2011-June/062139.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00017.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00018.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://theinvisiblethings.blogspot.com/2011/05/following-white-rabbit-software-attacks.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.invisiblethingslab.com/resources/2011/Software%20Attacks%20on%20Intel%20VT-d.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://xen.1045712.n5.nabble.com/Xen-security-advisory-CVE-2011-1898-VT-d-PCI-passthrough-MSI-td4390298.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://xen.org/download/index_4.0.2.html

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

Timeline

No history available yet.