CVE-2019-17348: Input Validation
Published Oct 8, 2019
·Updated
An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service because of an incompatibility between Process Context Identifiers (PCID) and shadow-pagetable switching.
Affected Software
4 affected componentsFixes available
debian/xen
4.11.4+107-gef32c7afa2-14.14.6-14.14.5+94-ge49571868d-14.17.2+76-ge1f9cb16e2-1~deb12u14.17.2+76-ge1f9cb16e2-1
XEN Xen<=4.11.2
Debian Debian Linux=9.0
Debian Debian Linux=10.0
Remediation
Patch Available
Patch Available
Event History
Oct 8, 2019
CVE Published
via MITRE·12:01 AM
Data Sourced
via MITRE·12:01 AM
Description
Frequently Asked Questions
1
What is CVE-2019-17348?
CVE-2019-17348 is a vulnerability in Xen that allows x86 PV guest OS users to cause a denial of service.
2
How does CVE-2019-17348 affect Xen?
CVE-2019-17348 affects Xen versions up to 4.11.x and can be exploited by x86 PV guest OS users to cause a denial of service.
3
What is the severity of CVE-2019-17348?
CVE-2019-17348 has a severity rating of moderate.
4
How can I fix CVE-2019-17348?
To fix CVE-2019-17348, you should update Xen to version 4.11.4+107-gef32c7afa2-1 or later.
5
Where can I find more information about CVE-2019-17348?
You can find more information about CVE-2019-17348 on the official Xen advisory page: https://xenbits.xen.org/xsa/advisory-294.html