CVE-2008-1952: Buffer Overflow

Reference Links

• http://lists.xensource.com/archives/html/xen-devel/2008-05/msg00421.html
• http://www.openwall.com/lists/oss-security/2008/05/21/9
• http://xenbits.xensource.com/xen-unstable.hg?rev/9044705960cb30cec385bdca7305bcf7db096721
• http://secunia.com/advisories/32088
• https://rhn.redhat.com/errata/RHSA-2008-0892.html
• http://www.securitytracker.com/id?1020957
• http://www.securityfocus.com/bid/30646
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43362
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11189
• https://access.redhat.com/security/cve/CVE-2008-1943
• https://bugzilla.redhat.com/show_bug.cgi?id=447759
• https://www.cve.org/CVERecord?id=CVE-2008-1952 https://nvd.nist.gov/vuln/detail/CVE-2008-1952
• https://access.redhat.com/errata/RHSA-2008:0892
• https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1952.json

Parent vulnerabilities

(Appears in the following advisories)

• RHSA-2008:0892

Frequently Asked Questions

• What is the severity of CVE-2008-1952?

  CVE-2008-1952 is classified as a denial of service vulnerability which can lead to a system crash.

• How do I fix CVE-2008-1952?

  To mitigate CVE-2008-1952, update to the version 0:3.0.3-64.el5_2.3 or newer for the affected Xen package.

• What products are affected by CVE-2008-1952?

  CVE-2008-1952 affects the XenSource Xen Para Virtualized Frame Buffer, specifically the older versions of the Xen package.

• What attacks can be performed using CVE-2008-1952?

  An attacker can exploit CVE-2008-1952 to map an arbitrary amount of guest memory, causing a denial of service.

• Is there a known workaround for CVE-2008-1952?

  Currently, the primary recommendation for CVE-2008-1952 is to apply the necessary updates rather than relying on a workaround.