Published: 08/12/2018 Updated: 21/11/2024

An issue exists in Xen up to and including 4.11.x allowing 64-bit PV guest OS users to cause a denial of service (host OS crash) because #GP[0] can occur after a non-canonical address is passed to the TLB flushing code. NOTE: this issue exists because of an incorrect CVE-2017-5754 (aka Meltdown) mitigation.

Vulnerable Product	Search on Vulmon	Subscribe to Product
xen xen
citrix xenserver 7.0
citrix xenserver 7.1
citrix xenserver 7.5
citrix xenserver 7.6
debian debian linux 9.0

An issue was discovered in Xen through 411x allowing 64-bit PV guest OS users to cause a denial of service (host OS crash) because #GP[0] can occur after a non-canonical address is passed to the TLB flushing code NOTE: this issue exists because of an incorrect CVE-2017-5754 (aka Meltdown) mitigation ...

Description of Problem A number of security vulnerabilities have been identified in Citrix XenServer that have deployment-dependent impacts These issues affect the following supported versions of Citrix XenServer: Citrix XenServer 76 Citrix XenServer 75 Citrix XenServer 71 LTSR CU1 Citrix XenServer 70 The following issues have been addressed: ...

Architecture internals learning path from Open Security Training, provides a set of resources to complete the learning path, includes code-base, videos, techniques, useful articles and concepts to understand the courses.

🔑 Open Security Training Architecture Architecture internals learning path from Open Security Training, provides a set of resources to complete the learning path, includes code-base, videos, techniques, useful articles and concepts to understand the courses provided from Open Security Training Register in post2fyi Resources Videos: wwwyoutubecom/watch?v=eItru0

Architecture internals learning path from Open Security Training, provides a set of resources to complete the learning path, includes code-base, videos, techniques, useful articles and concepts to understand the courses.

🔑 Open Security Training Architecture Architecture internals learning path from Open Security Training, provides a set of resources to complete the learning path, includes code-base, videos, techniques, useful articles and concepts to understand the courses provided from Open Security Training Register in post2fyi Resources Videos: wwwyoutubecom/watch?v=eItru0

NVD-CWE-noinfo https://nvd.nist.gov https://github.com/dabumana/Open-Security-Training-Architecture https://access.redhat.com/security/cve/cve-2018-19965 https://www.first.org/epss http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00072.html http://www.securityfocus.com/bid/106182 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UXC6BME7SXJI2ZIATNXCAH7RGPI4UKTT/https://support.citrix.com/article/CTX239432 https://www.debian.org/security/2019/dsa-4369 https://xenbits.xen.org/xsa/advisory-279.html http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00072.html http://www.securityfocus.com/bid/106182 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UXC6BME7SXJI2ZIATNXCAH7RGPI4UKTT/https://support.citrix.com/article/CTX239432 https://www.debian.org/security/2019/dsa-4369 https://xenbits.xen.org/xsa/advisory-279.html

CVE-2018-19965

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect