7.4

CVE-2011-1898

Exploit
Xen 4.1 before 4.1.1 and 4.0 before 4.0.2, when using PCI passthrough on Intel VT-d chipsets that do not have interrupt remapping, allows guest OS users to gain host OS privileges by "using DMA to generate MSI interrupts by writing to the interrupt injection registers."
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Citrix ≫ Xen Version4.0.0
Citrix ≫ Xen Version4.0.1
Citrix ≫ Xen Version4.1.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.85% 0.534
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.4 4.4 10
AV:A/AC:M/Au:S/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://lists.fedoraproject.org/pipermail/package-announce/2011-June/062112.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-June/062139.html
http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00017.html
http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00018.html
http://theinvisiblethings.blogspot.com/2011/05/following-white-rabbit-software-attacks.html
http://www.invisiblethingslab.com/resources/2011/Software%20Attacks%20on%20Intel%20VT-d.pdf
Exploit
http://xen.1045712.n5.nabble.com/Xen-security-advisory-CVE-2011-1898-VT-d-PCI-passthrough-MSI-td4390298.html
http://xen.org/download/index_4.0.2.html
Patch