CVE-2011-2519
Summary
| CVE | CVE-2011-2519 |
|---|---|
| State | PUBLISHED |
| Assigner | redhat |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2013-12-27 01:55:05 UTC |
| Updated | 2026-04-29 01:13:23 UTC |
| Description | Xen in the Linux kernel, when running a guest on a host without hardware assisted paging (HAP), allows guest users to cause a denial of service (invalid pointer dereference and hypervisor crash) via the SAHF instruction. |
Risk And Classification
Primary CVSS: v2.0 5.5 from [email protected]
AV:A/AC:L/Au:S/C:N/I:N/A:C
EPSS: 0.001370000 probability, percentile 0.331850000 (date 2026-04-30)
Problem Types: CWE-476 | n/a
CVSS v2.0 Breakdown
Access Vector
AdjacentAccess Complexity
LowAuthentication
SingleConfidentiality
NoneIntegrity
NoneAvailability
CompleteAV:A/AC:L/Au:S/C:N/I:N/A:C
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Redhat | Enterprise Linux Desktop | 5.0 | All | All | All |
| Operating System | Redhat | Enterprise Linux Server | 5.0 | All | All | All |
| Operating System | Redhat | Enterprise Linux Workstation | 5.0 | All | All | All |
| Operating System | Xen | Xen | All | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| oss-security - kernel: CVE-2011-2482/2519 | af854a3a-2127-422b-91ae-364da2661108 | www.openwall.com | Mailing List, Third Party Advisory |
| 718882 – (CVE-2011-2519) CVE-2011-2519 kernel: xen: x86_emulate: fix SAHF emulation | af854a3a-2127-422b-91ae-364da2661108 | bugzilla.redhat.com | Issue Tracking, Third Party Advisory |
| access.redhat.com | af854a3a-2127-422b-91ae-364da2661108 | rhn.redhat.com | Third Party Advisory |
| xen-3.1-testing.hg: 3290b4b5ecb4 | af854a3a-2127-422b-91ae-364da2661108 | xenbits.xen.org | Patch, Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.