Input validation

Xen through 4.8.x mishandles virtual interrupt injection, which allows guest OS users to cause a denial of service hypervisor crash, aka XSA-223...

UBUNTU-CVE-2017-10919

Xen through 4.8.x mishandles virtual interrupt injection, which allows guest OS users to cause a denial of service hypervisor crash, aka XSA-223...

CVE-2017-10919

Xen through 4.8.x mishandles virtual interrupt injection, which allows guest OS users to cause a denial of service hypervisor crash, aka XSA-223...

CVE-2017-10919

Xen through 4.8.x mishandles virtual interrupt injection, which allows guest OS users to cause a denial of service hypervisor crash, aka XSA-223...

CVE-2017-10919

CVE-2017-10919 affects the Xen hypervisor (up to 4.8.x) due to incorrect handling of virtual interrupt injection on ARM, allowing denial of service (hypervisor crash) for guest OS users. Connected documents confirm mitigations in package updates: Debian’s DSA-3969-1 fixes CVE-2017-10919 in Xen 4....

CVE-2017-10919

Xen through 4.8.x mishandles virtual interrupt injection, which allows guest OS users to cause a denial of service hypervisor crash, aka XSA-223...

CVE-2017-10919

Xen through 4.8.x mishandles virtual interrupt injection, which allows guest OS users to cause a denial of service hypervisor crash, aka XSA-223...

CVE-2017-10919: Undefined Security Weakness

Xen through 4.8.x mishandles virtual interrupt injection, which allows guest OS users to cause a denial of service hypervisor crash, aka XSA-223...

PT-2017-11607

Name of the Vulnerable Software and Affected Versions Xen versions prior to 4.9 Description The issue is related to the mishandling of virtual interrupt injection, allowing guest OS users to cause a denial of service, which results in a hypervisor crash. Recommendations For Xen versions prior to...

Xen 'xen/arch/arm/gic.c' Denial of Service Vulnerability

Xen is an open source virtual machine monitor product developed at the University of Cambridge in the United Kingdom. Xen has a security vulnerability that allows an attacker to crash the system by submitting a special request that could be exploited...

In XenMobile Server Command Line Console :The error shows a message"hrtimer: interrupt took * ns"

Opening the XenMobile Server console: The error shows a message "hrtimer: interrupt took ns": This is a system level message, it’s just a info log from the system. It is a generic warning from the kernel, that some hardware interrupt took longer than expected to service...

Linux kernel sound/isa/msnd/msnd_pinnacle.c/snd_msnd_interrupt function local denial of service vulnerability

Linux Kernel is an open source operating system. A security vulnerability in the Linux Kernel sound/isa/msnd/msndpinnacle.c/sndmsndinterrupt function allows a local attacker to exploit the vulnerability by submitting a submit special request to crash the system...

UBUNTU-CVE-2017-9984

The sndmsndinterrupt function in sound/isa/msnd/msndpinnacle.c in the Linux kernel through 4.11.7 allows local users to cause a denial of service over-boundary access or possibly have unspecified other impact by changing the value of a message queue head pointer between two kernel reads of that...

PT-2017-2425 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.11.8 Description: The issue is related to the snd msnd interrupt function in the Linux kernel, which allows local users to cause a denial of service or possibly have other unspecified impacts. This is due to a...

Linux kernel 'sound/oss/msnd_pinnacle.c/intr' denial of service vulnerability

Linux Kernel is an open source operating system. A security vulnerability exists in the Linux Kernel sound/oss/msndpinnacle.c/intr function, which can be exploited by a local attacker to submit a special request and crash the system...

ARM guest disabling interrupt may crash Xen

ISSUE DESCRIPTION Virtual interrupt injection could be triggered by a guest when sending an SGI e.g IPI to any vCPU or by configuring timers. When the virtual interrupt is masked, a missing check in the injection path may result in reading invalid hardware register or crashing the host. IMPACT A...

Android Code Execution

The vulnerability of MediaTek’s system interrupt driver for the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary malicious code within the kernel context. This issue is considered “high” because it...

CVE-2017-0616

An elevation of privilege vulnerability in the MediaTek system management interrupt driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product:...

CVE-2017-0616

An elevation of privilege vulnerability in the MediaTek system management interrupt driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product:...

CVE-2017-0616

CVE-2017-0616 describes an elevation of privilege in the MediaTek system management interrupt driver that could allow a local malicious Android app to execute arbitrary code in the kernel context. Affected product: Android. Impact is rated High, because exploitation requires first compromising a ...