Denial of service in Xen - CVE-2018-19964

Vulnerability identifier: #VU16004

CSH Severity: Low

CVSS v4.0: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2018-19964

CWE-ID: CWE-264

Exploitation vector: Adjecent network

Exploit availability: No public exploit available

Vendor: Xen Project

Affected software:
Xen

The vulnerability allows an adjacent attacker to cause DoS condition on the target system.

The weakness exists due to incorrect error handling for guest p2m page removals. An adjacent attacker can cause the service to crash.

Install update from vendor's website.

• http://xenbits.xen.org/xsa/advisory-277.html