PRIOn knowledge basePRION:CVE-2007-5907Code injection
6.4 Medium
AI Score
Confidence
High
4.7 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:N/I:N/A:C
0.001 Low
EPSS
Percentile
24.6%
Xen 3.1.1 does not prevent modification of the CR4 TSC from applications, which allows pv guests to cause a denial of service (crash).
References
lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html
lists.xensource.com/archives/html/xen-devel/2007-10/msg00932.html
secunia.com/advisories/28405
secunia.com/advisories/28412
secunia.com/advisories/28636
secunia.com/advisories/32485
www.novell.com/linux/security/advisories/suse_security_summary_report.html
www.redhat.com/support/errata/RHSA-2008-0957.html
www.securityfocus.com/bid/27219
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10380
Related
6.4 Medium
AI Score
Confidence
High
4.7 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:N/I:N/A:C
0.001 Low
EPSS
Percentile
24.6%