Unscored severity · published Dec 8, 2010
CVE-2010-3699
The backend driver in Xen 3.x allows guest OS users to cause a denial of service via a kernel thread leak, which prevents the device and guest OS from being shut down or create a…
–
CVSS
0.7%
EPSS
No
On KEV
Description
The backend driver in Xen 3.x allows guest OS users to cause a denial of service via a kernel thread leak, which prevents the device and guest OS from being shut down or create a zombie domain, causes a hang in zenwatch, or prevents unspecified xm commands from working properly, related to (1) netback, (2) blkback, or (3) blktap.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 54% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
XE
Xen · Citrix
3.0.2; 3.0.3; 3.0.4; 3.1.3; 3.1.4; 3.2.0; +10 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-3699
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-3699
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00007.html
Vendor Advisory
http://secunia.com/advisories/42372
secunia.com
http://secunia.com/advisories/42789
secunia.com
http://secunia.com/advisories/43056
secunia.com
http://secunia.com/advisories/46397
www.redhat.com
http://www.redhat.com/support/errata/RHSA-2011-0004.html
More from Xen
–
CVE-2011-3262
tools/libxc/xc_dom_bzimageloader.c in Xen 3.2, 3.3, 4.0, and 4.1 allows local users to cause a denial of service (management software infinite loop and management domain resource…
–
CVE-2011-1898
Xen 4.1 before 4.1.1 and 4.0 before 4.0.2, when using PCI passthrough on Intel VT-d chipsets that do not have interrupt remapping, allows guest OS users to gain host OS privileges…
–
CVE-2011-1583
Multiple integer overflows in tools/libxc/xc_dom_bzimageloader.c in Xen 3.2, 3.3, 4.0, and 4.1 allow local users to cause a denial of service and possibly execute arbitrary code…
–
CVE-2010-4255
The fixup_page_fault function in arch/x86/traps.c in Xen 4.0.1 and earlier on 64-bit platforms, when paravirtualization is enabled, does not verify that kernel mode is used to…
–
CVE-2010-4238
The vbd_create function in Xen 3.1.2, when the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5 is used, allows guest OS users to cause a denial of service (host OS panic)…