Veracode Vulnerability DatabaseVERACODE:23462Denial Of Service (DoS)
4.7 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:N/I:N/A:C
kernel is vulnerable to denial of service (DoS). The vulnerability exists as the Xen implementation did not prevent applications running in a para-virtualized guest from modifying CR4 TSC. This could cause a local denial of service.
References
lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html
lists.xensource.com/archives/html/xen-devel/2007-10/msg00932.html
secunia.com/advisories/28405
secunia.com/advisories/28412
secunia.com/advisories/28636
secunia.com/advisories/32485
www.novell.com/linux/security/advisories/suse_security_summary_report.html
www.redhat.com/security/updates/classification/#important
www.redhat.com/support/errata/RHSA-2008-0957.html
www.securityfocus.com/bid/27219
access.redhat.com/errata/RHSA-2008:0957
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10380
Related
4.7 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:N/I:N/A:C