Xen Multiple Buffer Overflow and Integer Overflow Vulnerabilities
BID:47779
Info
Xen Multiple Buffer Overflow and Integer Overflow Vulnerabilities
| Bugtraq ID: | 47779 |
| Class: | Design Error |
| CVE: |
CVE-2011-1583 |
| Remote: | No |
| Local: | Yes |
| Published: | May 09 2011 12:00AM |
| Updated: | May 07 2015 05:09PM |
| Credit: | Petr Matousek |
| Vulnerable: |
XenSource Xen 3.3.1 XenSource Xen 3.3 XenSource Xen 3.2 XenSource Xen 3.1.2 XenSource Xen 3.1.1 XenSource Xen 3.0.3 XenSource Xen 4.0 XenSource Xen 3.0 RedHat Enterprise Linux Virtualization 5 server RedHat Enterprise Linux Desktop Multi OS 5 client Red Hat Enterprise Linux Desktop 5 client Red Hat Enterprise Linux 5 Server Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 Citrix XenServer 5.6 SP2 Citrix XenServer 5.6 Feature Pack 1 Citrix XenServer 5.6 Common Criteria Citrix XenServer 5.6 Citrix XenServer 5.5 Citrix XenServer 5.0 Update 3 Avaya Aura System Platform 6.0 Avaya Aura System Platform 1.1 |
| Not Vulnerable: | |
Discussion
Xen Multiple Buffer Overflow and Integer Overflow Vulnerabilities
Xen is prone to multiple buffer-overflow and integer-overflow vulnerabilities.
Successfully exploiting these issues may allow attackers to execute arbitrary code within the context of the privileged domain (Dom0). Failed attempts will likely cause denial-of-service conditions.
Xen is prone to multiple buffer-overflow and integer-overflow vulnerabilities.
Successfully exploiting these issues may allow attackers to execute arbitrary code within the context of the privileged domain (Dom0). Failed attempts will likely cause denial-of-service conditions.
Exploit / POC
Xen Multiple Buffer Overflow and Integer Overflow Vulnerabilities
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Xen Multiple Buffer Overflow and Integer Overflow Vulnerabilities
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
Xen Multiple Buffer Overflow and Integer Overflow Vulnerabilities
References:
References:
- XenSource Homepage (XenSource)
- ASA-2011-161 xen security update (RHSA-2011-0496) (Avaya)
- Bug 696927 - (CVE-2011-1583) CVE-2011-1583 xen: insufficiencies in pv kernel ima (Red Hat )
- CTX130325: Citrix XenServer Multiple Security Updates (Citrix)
- xen security update (SecurityFocus)