The vulnerability of Xen hypervisors arises from synchronization errors when using shared resources, allowing a malicious actor to cause service failures or increase their privileges.

🗓️ 14 Apr 2020 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Xen hypervisors have shared-resource sync errors enabling privilege escalation or disruption.

Reporter	Title	Published	Views	Family All 55
CNVD	Xen Denial of Service Vulnerability (CNVD-2019-34763)	8 Oct 201900:00	–	cnvd
CVE	CVE-2019-17341	8 Oct 201900:03	–	cve
Cvelist	CVE-2019-17341	8 Oct 201900:03	–	cvelist
Debian	[SECURITY] [DSA 4602-1] xen security update	13 Jan 202022:27	–	debian
Debian CVE	CVE-2019-17341	8 Oct 201900:03	–	debiancve
Tenable Nessus	Debian DSA-4602-1 : xen - security update (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)	15 Jan 202000:00	–	nessus
Tenable Nessus	RHEL 5 : xen (Unpatched Vulnerability)	11 May 202400:00	–	nessus
Tenable Nessus	RHEL 5 : xen (Unpatched Vulnerability)	3 Jun 202400:00	–	nessus
Tenable Nessus	SUSE SLES11 Security Update : xen (SUSE-SU-2019:14199-1)	10 Jun 202100:00	–	nessus
Tenable Nessus	SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2019:2753-1) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)	24 Oct 201900:00	–	nessus

Vulners

Node

novell suse_enterprise_storageMatch4

OR

novell suse_openstack_cloudMatch7

OR

novell suse_linux_enterprise_module_for_basesystemMatch15

OR

novell suse_caas_platformMatch3.0

OR

novell suse_enterprise_storageMatch5

OR

novell suse_linux_enterprise_module_for_server_applicationsMatch15

OR

novell suse_openstack_cloudMatch8

OR

novell hpe_helion_openstackMatch8

OR

linux xenRange≤4.11.2

OR

novell opensuse_leapMatch15.0

Source	Link
suse	www.suse.com/security/cve/CVE-2019-17341/
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-17341
debian	www.debian.org/security/2020/dsa-4602
openwall	www.openwall.com/lists/oss-security/2019/10/25/6
wiki	www.wiki.astralinux.ru/astra-linux-se16-bulletin-20200327SE16
strelets	www.strelets.net/patchi-i-obnovleniya-bezopasnosti
web	www.web.nvd.nist.gov/view/vuln/detail

21 Nov 2023 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 26.9

CVSS 37.8

EPSS0.00104

Xen hypervisors shared resources synchronization errors privilege escalation disruption persistent device