CVE-2019-18422
First published: Thu Oct 31 2019(Updated: )
An issue was discovered in Xen through 4.12.x allowing ARM guest OS users to cause a denial of service or gain privileges by leveraging the erroneous enabling of interrupts. Interrupts are unconditionally unmasked in exception handlers. When an exception occurs on an ARM system which is handled without changing processor level, some interrupts are unconditionally enabled during exception entry. So exceptions which occur when interrupts are masked will effectively unmask the interrupts. A malicious guest might contrive to arrange for critical Xen code to run with interrupts erroneously enabled. This could lead to data corruption, denial of service, or possibly even privilege escalation. However a precise attack technique has not been identified.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| debian/xen | 4.11.4+107-gef32c7afa2-1 4.14.6-1 4.14.5+94-ge49571868d-1 4.17.2+76-ge1f9cb16e2-1~deb12u1 4.17.2+76-ge1f9cb16e2-1 | |
| Xen xen-unstable | <=4.12.1 | |
| Debian | =9.0 | |
| Debian | =10.0 | |
| Fedora | =29 | |
| Fedora | =30 | |
| Fedora | =31 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.openwall.com/lists/oss-security/2019/10/31/5
- http://xenbits.xen.org/xsa/advisory-303.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2BQKX7M2RHCWDBKNPX4KEBI3MJIH6AYZ/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I5WWPW4BSZDDW7VHU427XTVXV7ROOFFW/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IZYATWNUGHRBG6I3TC24YHP5Y3J7I6KH/
- https://seclists.org/bugtraq/2020/Jan/21
- https://www.debian.org/security/2020/dsa-4602
- https://xenbits.xen.org/xsa/advisory-303.html
- https://security-tracker.debian.org/tracker/CVE-2019-18422
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2BQKX7M2RHCWDBKNPX4KEBI3MJIH6AYZ/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I5WWPW4BSZDDW7VHU427XTVXV7ROOFFW/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IZYATWNUGHRBG6I3TC24YHP5Y3J7I6KH/
Frequently Asked Questions
What is the severity of CVE-2019-18422?
CVE-2019-18422 has been classified as a high severity vulnerability due to its potential to cause denial of service and privilege escalation.
How do I fix CVE-2019-18422?
To mitigate CVE-2019-18422, update affected Xen versions to at least 4.11.4+107-gef32c7afa2-1 or a later version.
What systems are affected by CVE-2019-18422?
CVE-2019-18422 affects Xen versions through 4.12.x on ARM systems running specific Debian and Fedora releases.
What type of vulnerability is CVE-2019-18422?
CVE-2019-18422 is a vulnerability that enables denial of service and privilege elevation via improper interrupt handling.
Who can exploit CVE-2019-18422?
CVE-2019-18422 can be exploited by ARM guest OS users due to the erroneous enabling of interrupts in exception handlers.
- collector/security-tracker-debian
- agent/type
- agent/remedy
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/author
- agent/last-modified-date
- agent/weakness
- agent/references
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- package-manager/debian
- vendor/xen
- canonical/xen xen-unstable
- version/xen xen-unstable/4.12.1
- vendor/debian
- canonical/debian
- version/debian/9.0
- version/debian/10.0
- vendor/fedoraproject
- canonical/fedora
- version/fedora/29
- version/fedora/30
- version/fedora/31