CVE-2018-10472: Infoleak
An issue was discovered in Xen through 4.10.x allowing x86 HVM guest OS users (in certain configurations) to read arbitrary dom0 files via QMP live insertion of a CDROM, in conjunction with specifying the target file as the backing file of a snapshot.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/xento a version that resolves this vulnerability.Fixed in 4.17.5+72-g01140da4e8-1Fixed in 4.17.7-0+deb12u1Fixed in 4.20.3+127-gc42374a105-0+deb13u1Fixed in 4.20.4+39-gf1e1321c87-0+deb13u1Fixed in 4.20.4+39-gf1e1321c87-1
Event History
Frequently Asked Questions
What is the severity of CVE-2018-10472?
The CVE-2018-10472 vulnerability is considered to be of medium severity as it enables x86 HVM guest OS users to read arbitrary dom0 files.
How do I fix CVE-2018-10472?
To fix CVE-2018-10472, upgrade to a version of Xen that is 4.11.4+107-gef32c7afa2-1 or later, or any of the specified patched versions.
Which versions of Xen are affected by CVE-2018-10472?
CVE-2018-10472 affects Xen versions up to and including 4.10.1.
Can CVE-2018-10472 allow guest OS files to be accessed from dom0?
Yes, CVE-2018-10472 allows x86 HVM guest OS users to read arbitrary dom0 files under certain configurations.
What systems are impacted by CVE-2018-10472?
CVE-2018-10472 impacts Xen installations and specifically Debian GNU/Linux systems running version 9.0 among others.