CVE-2011-1898
First published: Thu Jun 23 2011(Updated: )
Xen 4.1 before 4.1.1 and 4.0 before 4.0.2, when using PCI passthrough on Intel VT-d chipsets that do not have interrupt remapping, allows guest OS users to gain host OS privileges by "using DMA to generate MSI interrupts by writing to the interrupt injection registers."
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Citrix Xen | =4.1.0 | |
| Citrix Xen | =4.0.0 | |
| Citrix Xen | =4.0.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.fedoraproject.org/pipermail/package-announce/2011-June/062112.html
- http://www.invisiblethingslab.com/resources/2011/Software%20Attacks%20on%20Intel%20VT-d.pdf
- http://theinvisiblethings.blogspot.com/2011/05/following-white-rabbit-software-attacks.html
- http://xen.1045712.n5.nabble.com/Xen-security-advisory-CVE-2011-1898-VT-d-PCI-passthrough-MSI-td4390298.html
- http://xen.org/download/index_4.0.2.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-June/062139.html
- http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00018.html
- http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00017.html
- http://lists.xensource.com/archives/html/xen-devel/2011-05/msg00687.html
- https://access.redhat.com/security/cve/CVE-2011-1898
- http://docs.redhat.com/docs/en-US/index.html
- https://rhn.redhat.com/errata/RHSA-2011-1189.html
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=748692
- https://rhn.redhat.com/errata/RHSA-2011-1479.html
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=715555#c8
- https://access.redhat.com/kb/docs/DOC-66828
- https://rhn.redhat.com/errata/RHSA-2012-0358.html
- https://access.redhat.com/knowledge/articles/66747
- https://bugzilla.redhat.com/show_bug.cgi?id=715555
- collector/redhat-bugzilla
- alias/CVE-2011-1898
- collector/nvd-historical
- collector/nvd-index
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/remedy
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/type
- agent/weakness
- vendor/citrix
- canonical/citrix xen
- version/citrix xen/4.1.0
- version/citrix xen/4.0.0
- version/citrix xen/4.0.1