CVE-2008-1944: Buffer Overflow
Buffer overflow in the backend framebuffer of XenSource Xen Para-Virtualized Framebuffer (PVFB) Message 3.0 through 3.0.3 allows local users to cause a denial of service (SDL crash) and possibly execute arbitrary code via "bogus screen updates," related to missing validation of the "format of messages."
Other sources
Description of problem:
When using 'xm create' to start a paravirt guest, the SDL window often disappears part way through the boot.
Version-Release number of selected component (if applicable):
How reproducible:
Steps to Reproduce: 1. Configure a pv guest to use SDL graphics 2. xm create <pv guest> 3. wait for the guest to boot all the way up Actual results: I've seen the SDL window disappear on both i386 and ia64 about 20% of the time. I see nothing suspicious in xend.log. There is no output to xend-debug.log.
Expected results: The SDL window should remain present every time a paravirt guest is started.
Additional info:
Looks similar to bz# 217635
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-1944?
CVE-2008-1944 has a medium severity rating due to the potential for denial of service and arbitrary code execution.
How do I fix CVE-2008-1944?
To fix CVE-2008-1944, update your XenServer to a version later than 3.0.3 where the vulnerability has been patched.
What systems are affected by CVE-2008-1944?
CVE-2008-1944 affects XenServer versions 3.0 and 3.0.3, as well as some earlier versions of Red Hat Linux environments.
What type of attack is possible with CVE-2008-1944?
CVE-2008-1944 allows local users to perform a denial of service attack causing SDL crashes, and potentially execute arbitrary code.
Is CVE-2008-1944 exploitable remotely?
CVE-2008-1944 is not exploitable remotely as it requires local user access to trigger the buffer overflow.