CVE-2018-15469
published 2018-08-17CVE-2018-15469: An issue was discovered in Xen through 4.11.x. ARM never properly implemented grant table v2, either in the hypervisor or in Linux. Unfortunately, an ARM guest…
PriorityP423medium6.5CVSS 3.0
AVLACLPRLUINSCCNINAH
EPSS
0.42%
34.2th percentile
An issue was discovered in Xen through 4.11.x. ARM never properly implemented grant table v2, either in the hypervisor or in Linux. Unfortunately, an ARM guest can still request v2 grant tables; they will simply not be properly set up, resulting in subsequent grant-related hypercalls hitting BUG() checks. An unprivileged guest can cause a BUG() check in the hypervisor, resulting in a denial-of-service (crash).
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | xen | < xen 4.11.1~pre.20180911.5acdd26fdc+dfsg-2 (bookworm) | xen 4.11.1~pre.20180911.5acdd26fdc+dfsg-2 (bookworm) |
| xen | xen | <= 4.11.0 | — |
| xen | xen | >= 0 < 4.11.1~pre.20180911.5acdd26fdc+dfsg-2 | 4.11.1~pre.20180911.5acdd26fdc+dfsg-2 |
| xen | xen | >= 0 < 4.11.1~pre.20180911.5acdd26fdc+dfsg-2 | 4.11.1~pre.20180911.5acdd26fdc+dfsg-2 |
| xen | xen | >= 0 < 4.11.1~pre.20180911.5acdd26fdc+dfsg-2 | 4.11.1~pre.20180911.5acdd26fdc+dfsg-2 |
| xen | xen | >= 0 < 4.11.1~pre.20180911.5acdd26fdc+dfsg-2 | 4.11.1~pre.20180911.5acdd26fdc+dfsg-2 |
CVSS provenance
nvdv3.06.5MEDIUMCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
nvdv2.04.9MEDIUMAV:L/AC:L/Au:N/C:N/I:N/A:C
osv6.5MEDIUM
vendor_debian6.5MEDIUM
vendor_redhat6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-44v3-w2jc-h8pm: An issue was discovered in Xen through 4
ghsa_unreviewed·2022-05-14
CVE-2018-15469 [MEDIUM] CWE-400 GHSA-44v3-w2jc-h8pm: An issue was discovered in Xen through 4
An issue was discovered in Xen through 4.11.x. ARM never properly implemented grant table v2, either in the hypervisor or in Linux. Unfortunately, an ARM guest can still request v2 grant tables; they will simply not be properly set up, resulting in subsequent grant-related hypercalls hitting BUG() checks. An unprivileged guest can cause a BUG() check in the hypervisor, resulting in a denial-of-service (crash).
OSV
CVE-2018-15469: An issue was discovered in Xen through 4
osv·2018-08-17·CVSS 6.5
CVE-2018-15469 [MEDIUM] CVE-2018-15469: An issue was discovered in Xen through 4
An issue was discovered in Xen through 4.11.x. ARM never properly implemented grant table v2, either in the hypervisor or in Linux. Unfortunately, an ARM guest can still request v2 grant tables; they will simply not be properly set up, resulting in subsequent grant-related hypercalls hitting BUG() checks. An unprivileged guest can cause a BUG() check in the hypervisor, resulting in a denial-of-service (crash).
Red Hat
xen: Use of v2 grant tables may cause crash on ARM (XSA-268)
vendor_redhat·2018-08-14·CVSS 6.5
CVE-2018-15469 [MEDIUM] CWE-665 xen: Use of v2 grant tables may cause crash on ARM (XSA-268)
xen: Use of v2 grant tables may cause crash on ARM (XSA-268)
An issue was discovered in Xen through 4.11.x. ARM never properly implemented grant table v2, either in the hypervisor or in Linux. Unfortunately, an ARM guest can still request v2 grant tables; they will simply not be properly set up, resulting in subsequent grant-related hypercalls hitting BUG() checks. An unprivileged guest can cause a BUG() check in the hypervisor, resulting in a denial-of-service (crash).
Package: xen (Red Hat Enterprise Linux 5) - Not affected
Debian
CVE-2018-15469: xen - An issue was discovered in Xen through 4.11.x. ARM never properly implemented gr...
vendor_debian·2018·CVSS 6.5
CVE-2018-15469 [MEDIUM] CVE-2018-15469: xen - An issue was discovered in Xen through 4.11.x. ARM never properly implemented gr...
An issue was discovered in Xen through 4.11.x. ARM never properly implemented grant table v2, either in the hypervisor or in Linux. Unfortunately, an ARM guest can still request v2 grant tables; they will simply not be properly set up, resulting in subsequent grant-related hypercalls hitting BUG() checks. An unprivileged guest can cause a BUG() check in the hypervisor, resulting in a denial-of-service (crash).
Scope: local
bookworm: resolved (fixed in 4.11.1~pre.20180911.5acdd26fdc+dfsg-2)
bullseye: resolved (fixed in 4.11.1~pre.20180911.5acdd26fdc+dfsg-2)
forky: resolved (fixed in 4.11.1~pre.20180911.5acdd26fdc+dfsg-2)
sid: resolved (fixed in 4.11.1~pre.20180911.5acdd26fdc+dfsg-2)
trixie: resolved (fixed in 4.11.1~pre.20180911.5acdd26fdc+dfsg-2)
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2018-15469 xen: Use of v2 grant tables may cause crash on ARM (XSA-268) [fedora-all]
bugzilla·2018-08-14·CVSS 6.5
CVE-2018-15469 [MEDIUM] CVE-2018-15469 xen: Use of v2 grant tables may cause crash on ARM (XSA-268) [fedora-all]
CVE-2018-15469 xen: Use of v2 grant tables may cause crash on ARM (XSA-268) [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple support
Bugzilla
CVE-2018-15469 xen: Use of v2 grant tables may cause crash on ARM (XSA-268)
bugzilla·2018-07-31·CVSS 6.5
CVE-2018-15469 [MEDIUM] CVE-2018-15469 xen: Use of v2 grant tables may cause crash on ARM (XSA-268)
CVE-2018-15469 xen: Use of v2 grant tables may cause crash on ARM (XSA-268)
A flaw was found in xen. ARM never properly implemented grant table v2, either in the hypervisor or in Linux. Unfortunately, an ARM guest can still request v2 grant tables; they will simply not be properly set up, resulting in subsequent grant-related hypercalls hitting BUG() checks. An unprivileged guest can cause a BUG() check in the hypervisor, resulting in a denial-of-service.
Discussion:
Created xen tracking bugs for this issue:
Affects: fedora-all [bug 1616081]
http://xenbits.xen.org/xsa/advisory-268.htmlhttps://lists.debian.org/debian-lts-announce/2018/11/msg00013.htmlhttps://security.gentoo.org/glsa/201810-06http://xenbits.xen.org/xsa/advisory-268.htmlhttps://lists.debian.org/debian-lts-announce/2018/11/msg00013.htmlhttps://security.gentoo.org/glsa/201810-06
2018-08-17
Published