Lucene search

K
xenXen ProjectXSA-282
HistoryNov 06, 2018 - 6:40 p.m.

guest use of HLE constructs may lock up host

2018-11-0618:40:00
Xen Project
xenbits.xen.org
577

6.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

25.6%

ISSUE DESCRIPTION

Various Intel CPU models have an erratum listed under the title “Processor May Hang When Executing Code In an HLE Transaction”. It describes a potential hang when using instructions with the XACQUIRE prefix on the host physical memory range covering the first 4 MiB starting at the 1GiB boundary.

IMPACT

A malicious or buggy guest may cause a CPU to hang, resulting in a DoS (Denial of Service) affecting the entire host.

VULNERABLE SYSTEMS

All Xen versions are affected.
Only Intel based x86 systems are affected. Please refer to Intel documentation as to which specific CPU models are affected.
AMD x86 systems as well as Arm ones are not affected.

CPENameOperatorVersion
xeneqany

6.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

25.6%