Login Request a demo
Unscored severity · published May 22, 2009
CVE-2009-1758
The hypervisor_callback function in Xen, possibly before 3.4.0, as applied to the Linux kernel 2.6.30-rc4, 2.6.18, and probably other versions allows guest user applications to…
–
CVSS
2.2%
EPSS
No
On KEV
Description
The hypervisor_callback function in Xen, possibly before 3.4.0, as applied to the Linux kernel 2.6.30-rc4, 2.6.18, and probably other versions allows guest user applications to cause a denial of service (kernel oops) of the guest OS by triggering a segmentation fault in "certain address ranges."
Exploitation
Is it being used?
Exploit prediction (EPSS)2.2% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
XE
Xen · Xen
through 3.3.1; 2.0; 3.0.2; 3.0.3; 3.0.4; 3.1.2; +8 more · source: NVD
Affected product
XE
Xen
Xen
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-1758
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-1758
Exploit
http://lists.xensource.com/archives/html/xen-devel/2009-05/msg00561.html
secunia.com
http://secunia.com/advisories/35093
secunia.com
http://secunia.com/advisories/35298
www.debian.org
http://www.debian.org/security/2009/dsa-1809
www.openwall.com
http://www.openwall.com/lists/oss-security/2009/05/14/2
www.securityfocus.com
http://www.securityfocus.com/bid/34957
More from Xen
10.0
CVE-2017-10921
The grant-table feature in Xen through 4.8.x does not ensure sufficient type counts for a GNTMAP_device_map and GNTMAP_host_map mapping, which allows guest OS users to cause a…
10.0
CVE-2017-10920
The grant-table feature in Xen through 4.8.x mishandles a GNTMAP_device_map and GNTMAP_host_map mapping, when followed by only a GNTMAP_host_map unmapping, which allows guest OS…
10.0
CVE-2017-10918
Xen through 4.8.x does not validate memory allocations during certain P2M operations, which allows guest OS users to obtain privileged host OS access, aka XSA-222
10.0
CVE-2017-10912
Xen through 4.8.x mishandles page transfer, which allows guest OS users to obtain privileged host OS access, aka XSA-217
10.0
CVE-2015-8104
The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic or hang) by triggering many #DB…