Lucene search
Ubuntu.comUB:CVE-2008-1943HistoryMay 14, 2008 - 12:00 a.m.
CVE-2008-1943
2008-05-1400:00:00
ubuntu.com
ubuntu.com
16
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:N/A:P
0.0004 Low
EPSS
Percentile
5.2%
Buffer overflow in the backend of XenSource Xen Para Virtualized Frame
Buffer (PVFB) 3.0 through 3.1.2 allows local users to cause a denial of
service (crash) and possibly execute arbitrary code via a crafted
description of a shared framebuffer.
Bugs
- <https://bugzilla.redhat.com/show_bug.cgi?id=443078>
- <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=487097>
Notes
| Author | Note |
|---|---|
| kees | affects Xen 3.2 (and 3.2.1) too code for 3.1 is in tools/xenfb/ |
| mdeslaur | additional checks for this in CVE-2008-1952 xen-pvfb-validate-fb.patch in RHEL5 |
Related
ubuntucve
ubuntucve
CVE-2008-1952
2008-06-23 00:00:00
nessus
nessus
OracleVM 2.1 : xen (OVMSA-2008-2007)
2014-11-26 00:00:00
Scientific Linux Security Update : xen on SL5.x i386/x86_64
2012-08-01 00:00:00
Oracle Linux 5 : xen (ELSA-2008-0892)
2013-07-12 00:00:00
debian
debian
[Backports-security-announce] Security Update for xen-3
2008-12-15 12:39:05
[Backports-security-announce] Security Update for xen-3
2008-12-15 12:38:44
prion
prion
Buffer overflow
2008-05-14 18:20:00
Design/Logic Flaw
2008-06-23 19:41:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 00:26:30
Denial Of Service (DoS)
2020-04-10 00:27:30
seebug
seebug
XenθΆ
θζεεΈ§ηΌε²εΊεη«―εΈ§ηΌε²εΊε€ηζΌζ΄
2008-06-25 00:00:00
cve
cve
CVE-2008-1943
2008-05-14 18:20:00
CVE-2008-1952
2008-06-23 19:41:00
redhat
redhat
(RHSA-2008:0892) Important: xen security and bug fix update
2008-10-01 00:00:00
(RHSA-2008:0194) Important: xen security and bug fix update
2008-05-13 00:00:00
centos
centos
xen security update
2008-10-05 17:02:53
xen security update
2008-05-16 01:20:08
openvas
openvas
Oracle: Security Advisory (ELSA-2008-0892)
2015-10-08 00:00:00
RedHat Update for xen RHSA-2008:0892-01
2009-03-06 00:00:00
RedHat Update for xen RHSA-2008:0892-01
2009-03-06 00:00:00
oraclelinux
oraclelinux
xen security and bug fix update
2008-10-01 00:00:00
xen security and bug fix update
2008-05-13 00:00:00
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:N/A:P
0.0004 Low
EPSS
Percentile
5.2%
Related for UB:CVE-2008-1943