CVE-2018-19962 An issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS users to gain host OS privileges because small IOMMU mappings are unsafely combined into larger ones.
HighCVSS 7.8
EPSS 0.41%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS users to gain host OS privileges because small IOMMU mappings are unsafely combined into larger ones.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/xen(Debian:12) | < 4.11.1-1 | 4.11.1-1 |
| debian/xen(Debian:13) | < 4.11.1-1 | 4.11.1-1 |
| debian/xen(Debian:14) | < 4.11.1-1 | 4.11.1-1 |
| Xen | <= 4.11.1 | No fix listed |
| debian linux | = 9.0 | No fix listed |
| citrix xenserver | = 7.0 | No fix listed |
| citrix xenserver | = 7.1-cu1 | No fix listed |
| citrix xenserver | = 7.5 | No fix listed |
| citrix xenserver | = 7.6 | No fix listed |
| alpine/xen(Alpine:v3.10) | < 4.11.1-r0 | 4.11.1-r0 |
| alpine/xen(Alpine:v3.11) | < 4.11.1-r0 | 4.11.1-r0 |
| alpine/xen(Alpine:v3.12) | < 4.11.1-r0 | 4.11.1-r0 |
| alpine/xen(Alpine:v3.13) | < 4.11.1-r0 | 4.11.1-r0 |
| alpine/xen(Alpine:v3.14) | < 4.11.1-r0 | 4.11.1-r0 |
| alpine/xen(Alpine:v3.15) | < 4.11.1-r0 | 4.11.1-r0 |
| alpine/xen(Alpine:v3.16) | < 4.11.1-r0 | 4.11.1-r0 |
| alpine/xen(Alpine:v3.17) | < 4.11.1-r0 | 4.11.1-r0 |
| alpine/xen(Alpine:v3.18) | < 4.11.1-r0 | 4.11.1-r0 |
| alpine/xen(Alpine:v3.19) | < 4.11.1-r0 | 4.11.1-r0 |
| alpine/xen(Alpine:v3.20) | < 4.11.1-r0 | 4.11.1-r0 |
| alpine/xen(Alpine:v3.21) | < 4.11.1-r0 | 4.11.1-r0 |
| alpine/xen(Alpine:v3.22) | < 4.11.1-r0 | 4.11.1-r0 |
| alpine/xen(Alpine:v3.23) | < 4.11.1-r0 | 4.11.1-r0 |
| alpine/xen(Alpine:v3.24) | < 4.11.1-r0 | 4.11.1-r0 |
| alpine/xen(Alpine:v3.6) | < 4.8.5-r0 | 4.8.5-r0 |
Show 3 more
| Product | Affected versions | Fixed in |
|---|---|---|
| alpine/xen(Alpine:v3.7) | < 4.9.3-r1 | 4.9.3-r1 |
| alpine/xen(Alpine:v3.8) | < 4.10.2-r1 | 4.10.2-r1 |
| alpine/xen(Alpine:v3.9) | < 4.11.1-r0 | 4.11.1-r0 |
References
- Debian Security Tracker CVE-2018-19962 vendor-advisory
- openSUSE-SU-2019:1226 vendor-advisory
- 106182 third-party-advisory vdb-entry
- [debian-lts-announce] 20191008 [SECURITY] [DLA 1949-1] xen security update mailing-list
- FEDORA-2019-bce6498890 vendor-advisory
- support.citrix.com third-party-advisory
- DSA-4369 third-party-advisory vendor-advisory
- xenbits.xen.org patch vendor-advisory
- security.alpinelinux.org vendor-advisory