CVE-2018-10982: High severity xen xapi vulnerability
An issue was discovered in Xen through 4.10.x allowing x86 HVM guest OS users to cause a denial of service (unexpectedly high interrupt number, array overrun, and hypervisor crash) or possibly gain hypervisor privileges by setting up an HPET timer to deliver interrupts in IO-APIC mode, aka vHPET interrupt injection.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2018-10982?
CVE-2018-10982 has a high severity as it can lead to denial of service or potential hypervisor privilege escalation.
How can I mitigate CVE-2018-10982?
Mitigation of CVE-2018-10982 can be achieved by upgrading to versions 4.11.4+107-gef32c7afa2-1 or higher for Xen.
What systems are affected by CVE-2018-10982?
CVE-2018-10982 affects several versions of Xen, specifically those up to 4.10.1 and certain Debian Linux distributions.
What type of vulnerability is CVE-2018-10982?
CVE-2018-10982 is a denial of service vulnerability that may also allow privilege escalation within the hypervisor.
Who should be concerned about CVE-2018-10982?
Administrators and users of Xen-based virtual environments should be particularly concerned about CVE-2018-10982.