Lucene search

K
freebsdFreeBSDE4848CA4-8820-11E5-AB94-002590263BF5
HistoryOct 29, 2015 - 12:00 a.m.

xen-kernel -- some pmu and profiling hypercalls log without rate limiting

2015-10-2900:00:00
vuxml.freebsd.org
20

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

25.6%

The Xen Project reports:

HYPERCALL_xenoprof_op and HYPERVISOR_xenpmu_op log some errors and
attempts at invalid operations. These log messages are not
rate-limited, even though they can be triggered by guests.
A malicious guest could cause repeated logging to the hypervisor
console, leading to a Denial of Service attack.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchxen-kernel= 3.2UNKNOWN
FreeBSDanynoarchxen-kernel< 4.5.1_1UNKNOWN

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

25.6%