The vulnerability of Xen hypervisors relates to the lack of a mechanism for verifying input data. This allows attackers to gain unauthorized access to confidential data, cause service failures, and compromise data integrity.

🗓️ 27 Apr 2020 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Xen hypervisors lack input data verification, enabling unauthorized access and data integrity loss.

Reporter	Title	Published	Views	Family All 52
CNVD	Xen Denial of Service Vulnerability (CNVD-2019-34764)	8 Oct 201900:00	–	cnvd
CVE	CVE-2019-17340	8 Oct 201900:03	–	cve
Cvelist	CVE-2019-17340	8 Oct 201900:03	–	cvelist
Debian	[SECURITY] [DSA 4602-1] xen security update	13 Jan 202022:27	–	debian
Debian CVE	CVE-2019-17340	8 Oct 201900:03	–	debiancve
Tenable Nessus	Debian DSA-4602-1 : xen - security update (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)	15 Jan 202000:00	–	nessus
Tenable Nessus	RHEL 5 : xen (Unpatched Vulnerability)	11 May 202400:00	–	nessus
Tenable Nessus	SUSE SLES11 Security Update : xen (SUSE-SU-2019:14199-1)	10 Jun 202100:00	–	nessus
Tenable Nessus	SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2019:2753-1) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)	24 Oct 201900:00	–	nessus
Tenable Nessus	SUSE SLES12 Security Update : xen (SUSE-SU-2019:2769-1) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)	25 Oct 201900:00	–	nessus

Vulners

Node

novell suse_enterprise_storageMatch4

OR

novell suse_openstack_cloudMatch7

OR

novell suse_linux_enterprise_module_for_basesystemMatch15

OR

novell suse_caas_platformMatch3.0

OR

novell suse_enterprise_storageMatch5

OR

novell suse_linux_enterprise_module_for_server_applicationsMatch15

OR

novell suse_openstack_cloudMatch8

OR

novell hpe_helion_openstackMatch8

OR

linux xenRange3.2.0–4.11.2

OR

novell opensuse_leapMatch15.0

Source	Link
suse	www.suse.com/security/cve/CVE-2019-17340/
xenbits	www.xenbits.xen.org/xsa/advisory-284.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-17340
security-tracker	www.security-tracker.debian.org/tracker/CVE-2019-17340
wiki	www.wiki.astralinux.ru/astra-linux-se16-bulletin-20200327SE16
strelets	www.strelets.net/patchi-i-obnovleniya-bezopasnosti
web	www.web.nvd.nist.gov/view/vuln/detail

21 Nov 2023 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 27.2

CVSS 38.8

EPSS0.00353

Xen hypervisor input data verification unauthorized access service failures data integrity