Lucene search
Veracode Vulnerability DatabaseVERACODE:44533HistoryNov 30, 2023 - 8:56 p.m.
Denial Of Service (DoS)
2023-11-3020:56:35
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
xen
vulnerability
denial of service
pv vcpu
exploit
gdt
software.
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
AI Score
7
Confidence
High
EPSS
0
Percentile
9.0%
xen is vulnerable to Denial Of Service (DoS). The vulnerability exists because a PV vCPU can place a breakpoint over the live GDT. This allows the PV vCPU to exploit and lock up the CPU entirely.
Related
nessus
nessus
Xen: x86/AMD: Debug Mask handling (XSA-444)
2023-10-12 00:00:00
SUSE SLES15 Security Update : xen (SUSE-SU-2023:4174-1)
2023-10-25 00:00:00
ubuntucve
ubuntucve
CVE-2023-34328
2024-01-05 00:00:00
CVE-2023-34327
2024-01-05 00:00:00
nvd
nvd
CVE-2023-34328
2024-01-05 17:15:08
CVE-2023-34327
2024-01-05 17:15:08
xen
xen
x86/AMD: Debug Mask handling
2023-10-10 12:00:00
prion
prion
Design/Logic Flaw
2024-01-05 17:15:00
Design/Logic Flaw
2024-01-05 17:15:00
cvelist
cvelist
CVE-2023-34327 x86/AMD: Debug Mask handling
2024-01-05 16:34:10
CVE-2023-34328 x86/AMD: Debug Mask handling
2024-01-05 16:34:11
debiancve
debiancve
CVE-2023-34327
2024-01-05 17:15:08
CVE-2023-34328
2024-01-05 17:15:08
osv
osv
CVE-2023-34328
2024-01-05 17:15:08
CVE-2023-34327
2024-01-05 17:15:08
cve
cve
CVE-2023-34328
2024-01-05 17:15:08
CVE-2023-34327
2024-01-05 17:15:08
openvas
openvas
Fedora: Security Advisory for xen (FEDORA-2023-a4c606585e)
2023-10-28 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:4185-1)
2023-10-25 00:00:00
openSUSE: Security Advisory for xen (SUSE-SU-2023:4174-1)
2024-03-04 00:00:00
fedora
fedora
[SECURITY] Fedora 38 Update: xen-4.17.2-4.fc38
2023-10-26 01:51:34
[SECURITY] Fedora 39 Update: xen-4.17.2-4.fc39
2023-11-03 18:56:30
[SECURITY] Fedora 37 Update: xen-4.16.5-3.fc37
2023-10-27 01:11:56
gentoo
gentoo
Xen: Multiple Vulnerabilities
2024-09-22 00:00:00
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
AI Score
7
Confidence
High
EPSS
0
Percentile
9.0%
Related for VERACODE:44533