CVE-2008-3687: Buffer Overflow
Published Aug 14, 2008
·Updated
Heap-based buffer overflow in the flasksecuritylabel function in Xen 3.3, when compiled with the XSM:FLASK module, allows unprivileged domain users (domU) to execute arbitrary code via the flaskop hypercall.
Affected Software
2 affected components
XEN Xen Flask Module
XEN Xen=3.3
Remediation
Event History
Aug 14, 2008
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-3687?
CVE-2008-3687 is considered a critical vulnerability due to its potential for allowing unprivileged domain users to execute arbitrary code.
2
How do I fix CVE-2008-3687?
To fix CVE-2008-3687, ensure that you apply patches or updates provided by Xen for the vulnerable XSM:FLASK module.
3
What software versions are affected by CVE-2008-3687?
CVE-2008-3687 affects Xen 3.3 when compiled with the XSM:FLASK module.
4
Who is vulnerable to CVE-2008-3687?
Unprivileged domain users (domU) in a Xen environment are vulnerable to CVE-2008-3687.
5
What type of vulnerability is CVE-2008-3687?
CVE-2008-3687 is a heap-based buffer overflow vulnerability.