Lucene search

K
cve[email protected]CVE-2007-5907
HistoryNov 09, 2007 - 7:46 p.m.

CVE-2007-5907

2007-11-0919:46:00
CWE-264
web.nvd.nist.gov
42
xen
cr4 tsc
denial of service
nvd
cve-2007-5907

CVSS2

4.7

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

30.6%

Xen 3.1.1 does not prevent modification of the CR4 TSC from applications, which allows pv guests to cause a denial of service (crash).

Affected configurations

NVD
Node
xensource_incxenMatch3.1.1
VendorProductVersionCPE
xensource_incxen3.1.1cpe:/a:xensource_inc:xen:3.1.1:::

CVSS2

4.7

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

30.6%