CVE-2007-6207 Xen 3.x, possibly before 3.1.2, when running on IA64 systems, does not check the RID value for mov_to_rr, which allows a VTi domain to read memory of other domains.
LowCVSS 2.1
EPSS 0.35%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Xen 3.x, possibly before 3.1.2, when running on IA64 systems, does not check the RID value for mov_to_rr, which allows a VTi domain to read memory of other domains.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xensource inc xen | <= 3.1.1 | No fix listed |
References
- lists.xensource.com patch
- 20071021 [Xen-ia64-devel] PATCH: check r2 value for VTi mov rr[r3]=r2 mailing-list
- 41341 vdb-entry
- 27915 third-party-advisory
- 29236 third-party-advisory
- RHSA-2008:0154 vendor-advisory
- 26716 vdb-entry
- oval:org.mitre.oval:def:9471 signature vdb-entry