Denial of Service Vulnerability in Xen Hypervisor 4.0.1 and Earlier
CVE-2010-4255

Currently unrated

Key Information:

Vendor
Citrix
Status
Xen
Vendor
CVE Published:
25 January 2011

Summary

A vulnerability in the fixup_page_fault function within the Xen Hypervisor 4.0.1 and earlier on 64-bit platforms can be exploited when paravirtualization is enabled. Specifically, the flaw allows guest operating system users to perform crafted memory accesses, leading to a denial of service through a host OS bug. This situation can result in the hypervisor crashing, impacting all virtual machines running on the affected host.

References

http://www.securityfocus.com/archive/1/520102/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.redhat.com/support/errata/RHSA-2011-0017.html
vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/46397
third-party-advisoryx_refsource_SECUNIA

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.