Lucene search

CVE-2019-18421

🗓️ 31 Oct 2019 14:10:15Reported by mitreType

Xen through 4.12.x allows x86 PV guest OS users to gain host OS privileges by racing pagetable operations

Reporter	Title	Published	Views	Family All 60
Xen Project	Issues with restartable PV type change operations	31 Oct 201912:00	–	xen
Symantec	Xen CVE-2019-18421 Privilege Escalation Vulnerability	31 Oct 201900:00	–	symantec
RedhatCVE	CVE-2019-18421	1 Nov 201908:55	–	redhatcve
RedhatCVE	CVE-2019-19580	11 Dec 201912:51	–	redhatcve
OSV	CVE-2019-18421	31 Oct 201914:15	–	osv
OSV	CVE-2019-19580	11 Dec 201918:16	–	osv
OSV	xen - security update	13 Jan 202000:00	–	osv
Prion	Race condition	31 Oct 201914:15	–	prion
Prion	Race condition	11 Dec 201918:16	–	prion
NVD	CVE-2019-18421	31 Oct 201914:15	–	nvd

Nvd

Node

xen xenRange≤4.12.1x86

Node

debian debian_linuxMatch9.0

debian debian_linuxMatch10.0

fedoraproject fedoraMatch29

fedoraproject fedoraMatch30

fedoraproject fedoraMatch31

Node

opensuse leapMatch15.0

Source	Link
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I5WWPW4BSZDDW7VHU427XTVXV7ROOFFW/
openwall	www.openwall.com/lists/oss-security/2019/10/31/3
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IZYATWNUGHRBG6I3TC24YHP5Y3J7I6KH/
lists	www.lists.opensuse.org/opensuse-security-announce/2019-11/msg00037.html
debian	www.debian.org/security/2020/dsa-4602
xenbits	www.xenbits.xen.org/xsa/advisory-299.html
security	www.security.gentoo.org/glsa/202003-56
seclists	www.seclists.org/bugtraq/2020/Jan/21
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2BQKX7M2RHCWDBKNPX4KEBI3MJIH6AYZ/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

31 Oct 2019 14:15Current

8.1High risk

Vulners AI Score8.1

CVSS27.1

CVSS37.5

EPSS0.005

CWE-362