Out-of-bounds write in Xen - CVE-2018-10471
Published: May 10, 2018
Vulnerability identifier: #VU12542
CSH Severity: High
CVSS v4: 8.7 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-10471
CWE-ID: CWE-787
Exploitation vector: Adjecent network
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows an adjacent attacker to cause DoS condition or execute arbitrary code on the target system.
The weakness exists due to an unconditional write attempt of the value zero to an address near 2^64. An adjacent attacker can cause the service to crash or execute arbitrary code via unexpected INT 80 processing.
Successful exploitation of the vulnerability may result in system compromise.
The weakness exists due to an unconditional write attempt of the value zero to an address near 2^64. An adjacent attacker can cause the service to crash or execute arbitrary code via unexpected INT 80 processing.
Successful exploitation of the vulnerability may result in system compromise.
Affected software
Xen
Debian Linux
Gentoo Linux
SUSE Linux
Fedora
xen (Alpine package)
xen
Debian Linux
Gentoo Linux
SUSE Linux
Fedora
xen (Alpine package)
xen
How to mitigate CVE-2018-10471
Install update from vendor's website.
xen (Alpine package) - update to 4.6.6-r5
xen - addressed in versions 4.8.3-4.fc26, 4.9.2-2.fc27, 4.10.0-9.fc28
xen - addressed in versions 4.8.3-4.fc26, 4.9.2-2.fc27, 4.10.0-9.fc28
External References
Related Security Bulletins
- SUSE Linux update for xen
- SUSE Linux update for xen
- SUSE Linux update for xen
- SUSE Linux update for xen
- SUSE Linux update for xen
- SUSE Linux update for xen
- OpenSUSE Linux update for xen
- Debian update for xen
- Gentoo update for Xen
- Out-of-bounds write in xen (Alpine package)
- Fedora 28 update for xen
- Fedora 27 update for xen
- Fedora 26 update for xen