CVE-2018-7540

MEDIUM6.5EPSS 0.11%

xen - security update

Published: 2/27/2018Modified: 3/9/2026

Also known as:DSA-4131-1ALPINE-CVE-2018-7540DEBIAN-CVE-2018-7540DLA-1300-1

Description

An issue was discovered in Xen through 4.10.x allowing x86 PV guest OS users to cause a denial of service (host OS CPU hang) via non-preemptable L3/L4 pagetable freeing.

Affected packages (4)

Alpine/xenfrom 0, < 4.10.0-r2
Debian/xenfrom 0, < 4.8.3+comet2+shim4.10.0+comet3-1+deb9u5
Debian/xenfrom 0, < 4.1.6.lts1-13
Debian/xenfrom 0, < 4.8.3+comet2+shim4.10.0+comet3-1+deb9u5

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 3.1	MEDIUM6.5	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

References (2)

ADVISORYhttps://security.alpinelinux.org/vuln/CVE-2018-7540
ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2018-7540