CVE-2010-0730: Input Validation
First published: Fri Mar 12 2010(Updated: )
Paolo Bonzini found a bug in Xen hypervisor that can be used to crash the guest. Malicious guest userspace process can trick the hypervisor into emulating instruction that causes the crash if it has access to an MMIO region. The bug can be exploited because of an inconsistency between instruction decoding tables and the actual MMIO instruction decoder implementation.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Redhat Enterprise Linux | =5 | |
| Redhat Enterprise Linux | =5 | |
| Redhat Enterprise Linux | =5 | |
| Redhat Enterprise Linux | =5-ga | |
| Redhat Enterprise Linux | =5-ga | |
| Redhat Enterprise Linux | =5-ga | |
| Redhat Enterprise Linux | =5.0 | |
| Redhat Enterprise Linux Desktop | =5.0 | |
| Linux Linux kernel | =2.6.18 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.redhat.com/support/errata/RHSA-2010-0398.html
- http://secunia.com/advisories/39649
- http://www.securityfocus.com/bid/39979
- https://bugzilla.redhat.com/show_bug.cgi?id=572971
- http://www.openwall.com/lists/oss-security/2010/05/07/1
- http://support.avaya.com/css/P8/documents/100088287
- http://www.vmware.com/security/advisories/VMSA-2011-0003.html
- http://secunia.com/advisories/43315
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11430
- http://www.securityfocus.com/archive/1/516397/100/0/threaded
- https://rhn.redhat.com/errata/RHSA-2010-0398.html
- http://people.redhat.com/jwilson/el5
- collector/nvd-historical
- collector/nvd-index
- agent/references
- agent/type
- agent/first-publish-date
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/remedy
- agent/description
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2010-0730
- agent/event
- agent/tags
- agent/trending
- vendor/redhat
- canonical/redhat enterprise linux
- version/redhat enterprise linux/5
- version/redhat enterprise linux/5-ga
- version/redhat enterprise linux/5.0
- canonical/redhat enterprise linux desktop
- version/redhat enterprise linux desktop/5.0
- vendor/linux
- canonical/linux linux kernel
- version/linux linux kernel/2.6.18