Login Request a demo
Unscored severity · published Jan 11, 2011
CVE-2010-4247
The do_block_io_op function in (1) drivers/xen/blkback/blkback.c and (2) drivers/xen/blktap/blktap.c in Xen before 3.4.0 for the Linux kernel 2.6.18, and possibly other versions,…
–
CVSS
0.7%
EPSS
No
On KEV
Description
The do_block_io_op function in (1) drivers/xen/blkback/blkback.c and (2) drivers/xen/blktap/blktap.c in Xen before 3.4.0 for the Linux kernel 2.6.18, and possibly other versions, allows guest OS users to cause a denial of service (infinite loop and CPU consumption) via a large production request index to the blkback or blktap back-end drivers. NOTE: some of these details are obtained from third party information.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 54% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
XE
Xen · Citrix
through 3.3.2; 3.0.2; 3.0.3; 3.0.4; 3.1.3; 3.1.4; +6 more · source: NVD
Affected product
XE
Xen
Citrix
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-4247
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-4247
Vendor Advisory
http://secunia.com/advisories/35093
secunia.com
http://secunia.com/advisories/42789
secunia.com
http://secunia.com/advisories/46397
Patch
http://www.openwall.com/lists/oss-security/2010/11/23/1
Patch
http://www.openwall.com/lists/oss-security/2010/11/24/8
www.redhat.com
http://www.redhat.com/support/errata/RHSA-2011-0004.html
More from Xen
–
CVE-2011-3262
tools/libxc/xc_dom_bzimageloader.c in Xen 3.2, 3.3, 4.0, and 4.1 allows local users to cause a denial of service (management software infinite loop and management domain resource…
–
CVE-2011-1898
Xen 4.1 before 4.1.1 and 4.0 before 4.0.2, when using PCI passthrough on Intel VT-d chipsets that do not have interrupt remapping, allows guest OS users to gain host OS privileges…
–
CVE-2011-1583
Multiple integer overflows in tools/libxc/xc_dom_bzimageloader.c in Xen 3.2, 3.3, 4.0, and 4.1 allow local users to cause a denial of service and possibly execute arbitrary code…
–
CVE-2010-4255
The fixup_page_fault function in arch/x86/traps.c in Xen 4.0.1 and earlier on 64-bit platforms, when paravirtualization is enabled, does not verify that kernel mode is used to…
–
CVE-2010-4238
The vbd_create function in Xen 3.1.2, when the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5 is used, allows guest OS users to cause a denial of service (host OS panic)…