Permissions, Privileges, and Access Controls in Xen - CVE-2019-19579
Published: November 26, 2019 / Updated: December 5, 2019
Vulnerability identifier: #VU22997
CSH Severity: Low
CVSS v4: 7.5 [CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2019-19579
CWE-ID: CWE-264
Exploitation vector: Adjecent network
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to escalate privileges on the system.
The vulnerability exists due to an error within the PCI device assignment process that allows usage of alternative methods in Xen. A remote attacker with access to the guest OS and a physical device can gain write data into memory on the host operating system.
Successful exploitation of the vulnerability may allow a remote attacker to escalate privileges on the host operating system.
Affected software
Xen
Debian Linux
Opensuse
Fedora
xen (Alpine package)
xen (Debian package)
xen
Debian Linux
Opensuse
Fedora
xen (Alpine package)
xen (Debian package)
xen
How to mitigate CVE-2019-19579
Apply the following patches:
xsa306.patch xen-unstable xsa306-4.12.patch Xen 4.12.x xsa306-4.11.patch Xen 4.11.x, Xen 4.10.x xsa306-4.9.patch Xen 4.9.x, Xen 4.8.x $ sha256sum xsa306* 07468dcdfbe34b794fd0618bce7d6d1edb6b10b234dccf1e5dd1f1120a0affe7 xsa306.meta 3534ec46f03bb8dac3011e0e3739fc75400559078e4361bbe5385d97b7892650 xsa306.patch 426e32bfa7d7787fe6778685e623966f8762857f7920443a0ca73347df9d6624 xsa306-4.9.patch b00e58c9f96b0ff654dfd4904c675a54356148af718eb9b2adca0253b900dfc1 xsa306-4.11.patch 69857d08969903452fbf009905a145e06a5aef9966e969de9fbb22e62c557ffd xsa306-4.12.patch
xen (Alpine package) - update to 4.10.4-r2
xen (Debian package) - addressed in versions 4.8.5.final+shim4.10.4-1+deb9u12, 4.11.3+24-g14b62ab3e5-1~deb10u1
xen - update to 4.11.2-4.fc30
xen (Debian package) - addressed in versions 4.8.5.final+shim4.10.4-1+deb9u12, 4.11.3+24-g14b62ab3e5-1~deb10u1
xen - update to 4.11.2-4.fc30