CVE-2008-1944: Buffer Overflow

Published Apr 21, 2008
·
Updated

Buffer overflow in the backend framebuffer of XenSource Xen Para-Virtualized Framebuffer (PVFB) Message 3.0 through 3.0.3 allows local users to cause a denial of service (SDL crash) and possibly execute arbitrary code via "bogus screen updates," related to missing validation of the "format of messages."

Other sources

Description of problem:

When using 'xm create' to start a paravirt guest, the SDL window often disappears part way through the boot.

Version-Release number of selected component (if applicable):

How reproducible:

Steps to Reproduce: 1. Configure a pv guest to use SDL graphics 2. xm create <pv guest> 3. wait for the guest to boot all the way up Actual results: I've seen the SDL window disappear on both i386 and ia64 about 20% of the time. I see nothing suspicious in xend.log. There is no output to xend-debug.log.

Expected results: The SDL window should remain present every time a paravirt guest is started.

Additional info:

Looks similar to bz# 217635

Red Hat

Affected Software

6 affected components
redhat Desktop=5
redhat Enterprise Linux=5.0
redhat Enterprise Linux=5.0
redhat Virtualization Server=5
xensource Xen=3.0
xensource Xen=3.0.3

Event History

Apr 21, 2008
Data Sourced
via Red Hat·10:41 AM
DescriptionSeverityAffected Software
May 14, 2008
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Data Sourced
06:20 PM
DescriptionWeaknessAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2008-1944?

CVE-2008-1944 has a medium severity rating due to the potential for denial of service and arbitrary code execution.

2

How do I fix CVE-2008-1944?

To fix CVE-2008-1944, update your XenServer to a version later than 3.0.3 where the vulnerability has been patched.

3

What systems are affected by CVE-2008-1944?

CVE-2008-1944 affects XenServer versions 3.0 and 3.0.3, as well as some earlier versions of Red Hat Linux environments.

4

What type of attack is possible with CVE-2008-1944?

CVE-2008-1944 allows local users to perform a denial of service attack causing SDL crashes, and potentially execute arbitrary code.

5

Is CVE-2008-1944 exploitable remotely?

CVE-2008-1944 is not exploitable remotely as it requires local user access to trigger the buffer overflow.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203