CVE-2011-3131

published 2012-12-13

CVE-2011-3131: Xen 4.1.1 and earlier allows local guest OS kernels with control of a PCI[E] device to cause a denial of service (CPU consumption and host hang) via many…

Priority P4 15 medium 4.6 CVSS 2.0

AV L AC L Au S C N I N A C

Xen 4.1.1 and earlier allows local guest OS kernels with control of a PCI[E] device to cause a denial of service (CPU consumption and host hang) via many crafted DMA requests that are denied by the IOMMU, which triggers a livelock.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
debian	xen	< xen 4.1.2-1 (bookworm)	xen 4.1.2-1 (bookworm)
xen	xen	<= 4.1.1	—
xen	xen	>= 0 < 4.1.2-1	4.1.2-1
xen	xen	>= 0 < 4.1.2-1	4.1.2-1
xen	xen	>= 0 < 4.1.2-1	4.1.2-1
xen	xen	>= 0 < 4.1.2-1	4.1.2-1

CVSS provenance

nvd v2.0 4.6 MEDIUM AV:L/AC:L/Au:S/C:N/I:N/A:C

osv 4.6 MEDIUM

vendor_debian 4.6 MEDIUM

vendor_redhat 4.6 MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-399