CVE-2018-7540

MEDIUM6.5EPSS 0.11%

xen - security update

發布日:2018/2/27修改日:2026/3/9

也稱為:DSA-4131-1ALPINE-CVE-2018-7540DEBIAN-CVE-2018-7540DLA-1300-1

描述

An issue was discovered in Xen through 4.10.x allowing x86 PV guest OS users to cause a denial of service (host OS CPU hang) via non-preemptable L3/L4 pagetable freeing.

受影響套件(4)

Alpine/xenfrom 0, < 4.10.0-r2
Debian/xenfrom 0, < 4.8.3+comet2+shim4.10.0+comet3-1+deb9u5
Debian/xenfrom 0, < 4.1.6.lts1-13
Debian/xenfrom 0, < 4.8.3+comet2+shim4.10.0+comet3-1+deb9u5

CVSS 分數

來源	版本	嚴重程度	向量
osv	CVSS 3.1	MEDIUM6.5	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

參考連結(2)

ADVISORYhttps://security.alpinelinux.org/vuln/CVE-2018-7540
ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2018-7540