Main Vulnerability Database Vulnerabilities #VU12288

Error handling in Xen - CVE-2018-10471

Published: April 30, 2018 / Updated: July 28, 2020

Vulnerability identifier: #VU12288

CSH Severity: Low

CVSS v4: 7.1 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-10471

CWE-ID:

Exploitation vector: Adjecent network

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows an adjacent attacker to cause DoS condition on the target system.

The weakness exists due to error handling flaw. An adjacent attacker can cause the service to crash.

Xen
Fedora
xen

Install update from vendor's website.

xen - addressed in versions 4.8.3-4.fc26, 4.9.2-2.fc27, 4.10.0-9.fc28