REDHAT-BUG-447759: High severity xen project xen hypervisor vulnerability

Published May 21, 2008

Updated

Description of problem:

The recent fix to validate the frontend's frame buffer description neglected to limit the frame buffer size correctly. This lets a malicious frontend make the backend attempt to map an arbitrary amount of guest memory, which could be useful for a denial of service attack against dom0.

Proposed upstream patch:

http://xenbits.xensource.com/xen-unstable.hg?rev/9044705960cb30cec385bdca7305bcf7db096721

Affected Software

1 affected component

Xen Project Xen

Event History

May 21, 2008

Data Sourced

via Red Hat·04:55 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-447759?

The severity of REDHAT-BUG-447759 is considered high due to the potential for denial of service attacks.

How do I fix REDHAT-BUG-447759?

To fix REDHAT-BUG-447759, apply the latest patches provided by the Xen Project for the affected hypervisor.

Who is affected by REDHAT-BUG-447759?

The vulnerability REDHAT-BUG-447759 affects users of the Xen Project Xen Hypervisor.

What can exploit REDHAT-BUG-447759?

A malicious frontend can exploit REDHAT-BUG-447759 by causing the backend to map an arbitrary amount of guest memory.

What types of attacks can result from REDHAT-BUG-447759?

REDHAT-BUG-447759 can potentially lead to denial of service attacks against the Xen hypervisor.