CVE-2011-1898
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2011-1898
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2011-1898.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2011-1898
- Related
- Published
- 2011-08-12T18:55:00Z
- Modified
- 2024-09-18T01:00:21Z
- Summary
- [none]
- Details
-
Xen 4.1 before 4.1.1 and 4.0 before 4.0.2, when using PCI passthrough on Intel VT-d chipsets that do not have interrupt remapping, allows guest OS users to gain host OS privileges by "using DMA to generate MSI interrupts by writing to the interrupt injection registers."
- References
-
- http://xen.1045712.n5.nabble.com/Xen-security-advisory-CVE-2011-1898-VT-d-PCI-passthrough-MSI-td4390298.html
- http://theinvisiblethings.blogspot.com/2011/05/following-white-rabbit-software-attacks.html
- http://www.invisiblethingslab.com/resources/2011/Software%20Attacks%20on%20Intel%20VT-d.pdf
- http://xen.org/download/index_4.0.2.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-June/062112.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-June/062139.html
- http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00017.html
- http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00018.html
- https://security-tracker.debian.org/tracker/CVE-2011-1898
Affected packages
Debian:11 / xen
Package
- Name
- xen
- Purl
- pkg:deb/debian/xen?arch=source
Debian:12 / xen
Package
- Name
- xen
- Purl
- pkg:deb/debian/xen?arch=source
Debian:13 / xen
Package
- Name
- xen
- Purl
- pkg:deb/debian/xen?arch=source