Vulnerability in Citrix Xen
CVE-2010-4238
The vbd_create function in Xen 3.1.2, when the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5 is used, allows guest OS users to cause a denial of service (host OS panic) via an attempted access to a virtual CD-ROM device through the blkback driver. NOTE: some of these details are obtained from third party information.
EPSS: 0.010 (58.3th percentile) — read the EPSS interpretation.
Affected products
- Citrix Xen — versions 3.1.2
- Linux Linux_kernel — versions 2.6.18
- Redhat Enterprise_linux — versions 5
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert@redhat.com (Exploit, x_refsource_MISC)
- secalert@redhat.com (x_refsource_CONFIRM, Exploit)
- secalert@redhat.com (mailing-list, x_refsource_BUGTRAQ)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)
- secalert@redhat.com (x_refsource_SECUNIA, third-party-advisory)
- secalert@redhat.com (x_refsource_CONFIRM)
- secalert@redhat.com (x_refsource_SECUNIA, third-party-advisory)
- secalert@redhat.com (vdb-entry, x_refsource_BID)
- secalert@redhat.com (vdb-entry, x_refsource_XF)