Denial of Service Vulnerability in Xen Drivers for Linux Kernel
CVE-2010-4247

Currently unrated

Key Information:

Vendor
Citrix
Status
Xen
Vendor
CVE Published:
11 January 2011

Summary

The do_block_io_op function in the Xen drivers (blkback and blktap) before version 3.4.0 for the Linux kernel 2.6.18 may allow guest OS users to exploit an infinite loop caused by a large production request index. This results in high CPU consumption and can lead to a denial of service, compromising the system's availability.

References

http://secunia.com/advisories/42789
third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2011/0024
vdb-entryx_refsource_VUPEN
http://www.redhat.com/support/errata/RHSA-2011-0004.html
vendor-advisoryx_refsource_REDHAT

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.