CVE-2019-18420: Medium severity xen xapi vulnerability
An issue was discovered in Xen through 4.12.x allowing x86 PV guest OS users to cause a denial of service via a VCPUOPinitialise hypercall. hypercallcreatecontinuation() is a variadic function which uses a printf-like format string to interpret its parameters. Error handling for a bad format character was done using BUG(), which crashes Xen. One path, via the VCPUOPinitialise hypercall, has a bad format character. The BUG() can be hit if VCPUOPinitialise executes for a sufficiently long period of time for a continuation to be created. Malicious guests may cause a hypervisor crash, resulting in a Denial of Service (DoS). Xen versions 4.6 and newer are vulnerable. Xen versions 4.5 and earlier are not vulnerable. Only x86 PV guests can exploit the vulnerability. HVM and PVH guests, and guests on ARM systems, cannot exploit the vulnerability.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2019-18420?
CVE-2019-18420 is classified as a denial of service vulnerability that impacts Xen hypervisors.
How do I fix CVE-2019-18420?
To fix CVE-2019-18420, update your Xen installation to a version that is not affected, specifically those higher than 4.12.1.
Who is affected by CVE-2019-18420?
CVE-2019-18420 affects x86 PV guest OS users operating on vulnerable versions of the Xen hypervisor.
What systems are vulnerable to CVE-2019-18420?
Systems running Xen versions up to and including 4.12.1 are vulnerable to CVE-2019-18420.
What impact does CVE-2019-18420 have on systems?
CVE-2019-18420 can lead to a denial of service condition, disrupting service for guest operating systems.