Lucene search

K
ubuntucveUbuntu.comUB:CVE-2007-5907
HistoryNov 09, 2007 - 12:00 a.m.

CVE-2007-5907

2007-11-0900:00:00
ubuntu.com
ubuntu.com
11

CVSS2

4.7

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

EPSS

0.001

Percentile

30.6%

Xen 3.1.1 does not prevent modification of the CR4 TSC from applications,
which allows pv guests to cause a denial of service (crash).

Notes

Author Note
mdeslaur code in 3.2 and 3.3 doesn’t look vulnerable

CVSS2

4.7

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

EPSS

0.001

Percentile

30.6%