CVE-2018-10981

Published: May 10, 2018Modified: Nov 21, 2024

6.5

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Exploitability: 2.0 / Impact: 4.0

Source: NVD

Description

An issue was discovered in Xen through 4.10.x allowing x86 HVM guest OS users to cause a denial of service (host OS infinite loop) in situations where a QEMU device model attempts to make invalid transitions between states of a request.

Affected (4)

Products: Debian: Debian Linux · Xen: Xen

1 product

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 7.0
Debian Debian Linux	Version 8.0
Debian Debian Linux	Version 9.0

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Xen Xen	Up to 4.10.1

Related CWEs

CWE-835

Loop with Unreachable Exit Condition ('Infinite Loop')

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

References (14)

http://openwall.com/lists/oss-security/2018/05/08/3

Source: cve@mitre.org

Mailing ListPatchThird Party Advisory

http://www.securityfocus.com/bid/104149

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://lists.debian.org/debian-lts-announce/2018/05/msg00015.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://lists.debian.org/debian-lts-announce/2018/10/msg00021.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://security.gentoo.org/glsa/201810-06

Source: cve@mitre.org

Third Party Advisory

https://www.debian.org/security/2018/dsa-4201

Source: cve@mitre.org

Third Party Advisory

https://xenbits.xen.org/xsa/advisory-262.html

Source: cve@mitre.org

PatchVendor Advisory

http://openwall.com/lists/oss-security/2018/05/08/3