CVE-2018-7542: Null Pointer Dereference
An issue was discovered in Xen 4.8.x through 4.10.x allowing x86 PVH guest OS users to cause a denial of service (NULL pointer dereference and hypervisor crash) by leveraging the mishandling of configurations that lack a Local APIC.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/xento a version that resolves this vulnerability.Fixed in 4.11.4+107-gef32c7afa2-1Fixed in 4.14.6-1Fixed in 4.14.5+94-ge49571868d-1Fixed in 4.17.1+2-gb773c48e36-1Fixed in 4.17.2+55-g0b56bed864-1
Event History
Frequently Asked Questions
What is the severity of CVE-2018-7542?
CVE-2018-7542 has a severity rating that indicates it can lead to a denial of service due to a null pointer dereference.
How do I fix CVE-2018-7542?
To fix CVE-2018-7542, upgrade to Xen version 4.11.4+107-gef32c7afa2-1 or later, or any of the other specified secure versions.
Which versions of Xen are affected by CVE-2018-7542?
Xen versions from 4.8.x through 4.10.x are affected by CVE-2018-7542.
What type of systems are vulnerable to CVE-2018-7542?
CVE-2018-7542 affects x86 PVH guest operating systems running on vulnerable Xen hypervisors.
What can happen if CVE-2018-7542 is exploited?
Exploitation of CVE-2018-7542 can result in a hypervisor crash, leading to service disruption.