PT-2018-2671

CVE-2018-19962

Published

2018-12-07

Updated

2019-10-08

Description by

CVSS 3.1

7.8

High

MetricsAV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Xen versions prior to 4.12

Description An issue in Xen on AMD x86 platforms allows guest OS users to potentially gain host OS privileges due to the unsafe combination of small IOMMU mappings into larger ones. This could enable an attacker to elevate their privileges.

Recommendations For Xen versions prior to 4.12, update to a version that includes the fix for this issue to prevent potential privilege escalation.

Exploitability

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CWE-264

Related identifiers

CVE-2018-19962

BDU:2019-01306