PT-2018-2671
CVE-2018-19962
·
تاريخ النشر
2018-12-07
·
تاريخ التحديث
2019-10-08
الوصف من
CVSS 3.1
7.8
عاليةالمقاييسAV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Xen versions prior to 4.12
Description
An issue in Xen on AMD x86 platforms allows guest OS users to potentially gain host OS privileges due to the unsafe combination of small IOMMU mappings into larger ones. This could enable an attacker to elevate their privileges.
Recommendations
For Xen versions prior to 4.12, update to a version that includes the fix for this issue to prevent potential privilege escalation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾