CVE-2018-19965 An issue was discovered in Xen through 4.11.x allowing 64-bit PV guest OS users to cause a denial of service (host OS crash) because #GP[0] can occur after a non-canonical address is passed to the TLB...
MediumCVSS 5.6
EPSS 0.43%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in Xen through 4.11.x allowing 64-bit PV guest OS users to cause a denial of service (host OS crash) because #GP[0] can occur after a non-canonical address is passed to the TLB flushing code. NOTE: this issue exists because of an incorrect CVE-2017-5754 (aka Meltdown) mitigation.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/xen(Debian:12) | < 4.11.1-1 | 4.11.1-1 |
| debian/xen(Debian:13) | < 4.11.1-1 | 4.11.1-1 |
| debian/xen(Debian:14) | < 4.11.1-1 | 4.11.1-1 |
| Xen | <= 4.11.1 | No fix listed |
| citrix xenserver | = 7.0 | No fix listed |
| citrix xenserver | = 7.1-cu1 | No fix listed |
| citrix xenserver | = 7.5 | No fix listed |
| citrix xenserver | = 7.6 | No fix listed |
| debian linux | = 9.0 | No fix listed |
| alpine/xen(Alpine:v3.10) | < 4.11.1-r0 | 4.11.1-r0 |
| alpine/xen(Alpine:v3.11) | < 4.11.1-r0 | 4.11.1-r0 |
| alpine/xen(Alpine:v3.12) | < 4.11.1-r0 | 4.11.1-r0 |
| alpine/xen(Alpine:v3.13) | < 4.11.1-r0 | 4.11.1-r0 |
| alpine/xen(Alpine:v3.14) | < 4.11.1-r0 | 4.11.1-r0 |
| alpine/xen(Alpine:v3.15) | < 4.11.1-r0 | 4.11.1-r0 |
| alpine/xen(Alpine:v3.16) | < 4.11.1-r0 | 4.11.1-r0 |
| alpine/xen(Alpine:v3.17) | < 4.11.1-r0 | 4.11.1-r0 |
| alpine/xen(Alpine:v3.18) | < 4.11.1-r0 | 4.11.1-r0 |
| alpine/xen(Alpine:v3.19) | < 4.11.1-r0 | 4.11.1-r0 |
| alpine/xen(Alpine:v3.20) | < 4.11.1-r0 | 4.11.1-r0 |
| alpine/xen(Alpine:v3.21) | < 4.11.1-r0 | 4.11.1-r0 |
| alpine/xen(Alpine:v3.22) | < 4.11.1-r0 | 4.11.1-r0 |
| alpine/xen(Alpine:v3.23) | < 4.11.1-r0 | 4.11.1-r0 |
| alpine/xen(Alpine:v3.24) | < 4.11.1-r0 | 4.11.1-r0 |
| alpine/xen(Alpine:v3.6) | < 4.8.5-r0 | 4.8.5-r0 |
Show 3 more
| Product | Affected versions | Fixed in |
|---|---|---|
| alpine/xen(Alpine:v3.7) | < 4.9.3-r1 | 4.9.3-r1 |
| alpine/xen(Alpine:v3.8) | < 4.10.2-r1 | 4.10.2-r1 |
| alpine/xen(Alpine:v3.9) | < 4.11.1-r0 | 4.11.1-r0 |
References
- Debian Security Tracker CVE-2018-19965 vendor-advisory
- openSUSE-SU-2019:1226 vendor-advisory
- 106182 third-party-advisory vdb-entry
- FEDORA-2019-bce6498890 vendor-advisory
- support.citrix.com patch third-party-advisory
- DSA-4369 third-party-advisory vendor-advisory
- xenbits.xen.org mitigation patch vendor-advisory
- security.alpinelinux.org vendor-advisory