Denial of service in Xen - CVE-2018-19966

Vulnerability identifier: #VU16006

CSH Severity: Low

CVSS v4: 7.1 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-19966

CWE-ID: CWE-264

Exploitation vector: Adjecent network

Exploit availability: No public exploit available

The vulnerability allows an adjacent attacker to cause DoS condition on the target system.

The weakness exists due to XSA-240 conflicts with shadow paging. An adjacent attacker can cause the service to crash.

Xen
xen (Alpine package)
xen (Debian package)
xen
Opensuse
Fedora

Install update from vendor's website.

xen (Alpine package) - update to 4.9.3-r1
xen (Debian package) - update to 4.8.5+shim4.10.2+xsa282-1+deb9u11
xen - addressed in versions 4.10.2-4.fc28, 4.10.3-1.fc28, 4.10.3-2.fc28, 4.11.0-10.fc29

• http://xenbits.xen.org/xsa/advisory-280.html

• Multiple vulnerabilities in Xen
• OpenSUSE Linux update for xen
• Debian update for xen
• OpenSUSE Linux update for xen
• Denial of service in xen (Alpine package)
• Fedora 29 update for xen
• Fedora 28 update for xen
• Fedora 28 update for xen
• Fedora 28 update for xen