CVE Daily

CVE-2011-3131

Xen 4.1.1 and earlier allows local guest OS kernels with control of a PCI[E] dev...

Medium CVSS 4.6

Overview

Xen 4.1.1 and earlier allows local guest OS kernels with control of a PCI[E] device to cause a denial of service (CPU consumption and host hang) via many crafted DMA requests that are denied by the IOMMU, which triggers a livelock.

CWE: CWE-399 Published: 2012-12-13T11:53:33.350
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 4.6 (MEDIUM)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags