ID CVE-2007-5906
Summary Xen 3.1.1 allows virtual guest system users to cause a denial of service (hypervisor crash) by using a debug register (DR7) to set certain breakpoints.
References
Vulnerable Configurations
  • cpe:2.3:a:xensource_inc:xen:3.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:xensource_inc:xen:3.1.1:*:*:*:*:*:*:*
CVSS
Base: 4.7 (as of 05-09-2008 - 21:31)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
LOCAL MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE COMPLETE
cvss-vector via4 AV:L/AC:M/Au:N/C:N/I:N/A:C
redhat via4
rpms
  • kernel-0:2.6.18-92.el5
  • kernel-PAE-0:2.6.18-92.el5
  • kernel-PAE-debuginfo-0:2.6.18-92.el5
  • kernel-PAE-devel-0:2.6.18-92.el5
  • kernel-debug-0:2.6.18-92.el5
  • kernel-debug-debuginfo-0:2.6.18-92.el5
  • kernel-debug-devel-0:2.6.18-92.el5
  • kernel-debuginfo-0:2.6.18-92.el5
  • kernel-debuginfo-common-0:2.6.18-92.el5
  • kernel-devel-0:2.6.18-92.el5
  • kernel-doc-0:2.6.18-92.el5
  • kernel-headers-0:2.6.18-92.el5
  • kernel-kdump-0:2.6.18-92.el5
  • kernel-kdump-debuginfo-0:2.6.18-92.el5
  • kernel-kdump-devel-0:2.6.18-92.el5
  • kernel-xen-0:2.6.18-92.el5
  • kernel-xen-debuginfo-0:2.6.18-92.el5
  • kernel-xen-devel-0:2.6.18-92.el5
refmap via4
bid 27219
mlist [Xen-devel] 20071031 [PATCH, fixed] x86: fix debug register handling
secunia
  • 28405
  • 28412
  • 28636
suse
  • SUSE-SR:2008:001
  • SUSE-SR:2008:002
Last major update 05-09-2008 - 21:31
Published 09-11-2007 - 19:46
Last modified 05-09-2008 - 21:31
Back to Top