CVE-2007-5907 Xen 3.1.1 does not prevent modification of the CR4 TSC from applications, which allows pv guests to cause a denial of service (crash).
MediumCVSS 4.7
EPSS 0.35%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Xen 3.1.1 does not prevent modification of the CR4 TSC from applications, which allows pv guests to cause a denial of service (crash).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xensource inc xen | = 3.1.1 | No fix listed |
References
- SUSE-SR:2008:001 vendor-advisory
- [Xen-devel] 20071029 [PATCH] x86: allow pv guests to disable TSC for applications mailing-list
- 28405 third-party-advisory
- 28412 third-party-advisory
- 28636 third-party-advisory
- 32485 third-party-advisory
- SUSE-SR:2008:002 vendor-advisory
- RHSA-2008:0957 vendor-advisory
- 27219 vdb-entry
- oval:org.mitre.oval:def:10380 signature vdb-entry