EUVD-2018-11636

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Xen issue allows denial of service or host OS privilege escalation due to incorrect shadow paging fix

Reporter	Title	Published	Views	Family All 75
IBM Security Bulletins	Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801-v	18 Apr 201916:40	–	ibm
CNVD	Xen Shadow Paging Conflict Vulnerability	10 Dec 201800:00	–	cnvd
CVE	CVE-2018-19966	8 Dec 201804:00	–	cve
Cvelist	CVE-2018-19966	8 Dec 201804:00	–	cvelist
Debian	[SECURITY] [DLA 1949-1] xen security update	8 Oct 201912:40	–	debian
Debian	[SECURITY] [DSA 4369-1] xen security update	14 Jan 201922:09	–	debian
Debian CVE	CVE-2018-19966	8 Dec 201804:00	–	debiancve
Tenable Nessus	Debian DLA-1949-1 : xen security update	9 Oct 201900:00	–	nessus
Tenable Nessus	Debian DSA-4369-1 : xen - security update	15 Jan 201900:00	–	nessus
Tenable Nessus	Fedora 28 : xen (2019-bce6498890)	25 Mar 201900:00	–	nessus

[
  {
    "enisaIdVendor": [
      {
        "id": "64d0b655-7550-3045-bb04-031b448bfca9",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "a1995792-5a44-33d9-8597-a6a96378edd9",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
suse	www.suse.com/security/cve/CVE-2018-19966.html
debian	www.debian.org/security/2019/dsa-4369
xenbits	www.xenbits.xen.org/xsa/advisory-280.html
securityfocus	www.securityfocus.com/bid/106182
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UXC6BME7SXJI2ZIATNXCAH7RGPI4UKTT/
lists	www.lists.opensuse.org/opensuse-security-announce/2019-04/msg00072.html
lists	www.lists.debian.org/debian-lts-announce/2019/10/msg00008.html
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

8.6High risk

Vulners AI Score8.6

CVSS 38.8

CVSS 27.2

EPSS0.00123