CVE-2023-34327
published 2024-01-05CVE-2023-34327: [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] AMD CPUs since ~2014 have…
PriorityP420medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.26%
17.0th percentile
[This CNA information record relates to multiple CVEs; the
text explains which aspects/vulnerabilities correspond to which CVE.]
AMD CPUs since ~2014 have extensions to normal x86 debugging functionality.
Xen supports guests using these extensions.
Unfortunately there are errors in Xen's handling of the guest state, leading
to denials of service.
1) CVE-2023-34327 - An HVM vCPU can end up operating in the context of
a previous vCPUs debug mask state.
2) CVE-2023-34328 - A PV vCPU can place a breakpoint over the live GDT.
This allows the PV vCPU to exploit XSA-156 / CVE-2015-8104 and lock
up the CPU entirely.
Affected
17 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| citrix | citrix_hypervisor | — | — |
| citrix | xenserver | — | — |
| debian | xen | < xen 4.17.2+76-ge1f9cb16e2-1~deb12u1 (bookworm) | xen 4.17.2+76-ge1f9cb16e2-1~deb12u1 (bookworm) |
| xen | xen | >= 0 < 4.15.5-r3 | 4.15.5-r3 |
| xen | xen | >= 0 < 4.16.5-r3 | 4.16.5-r3 |
| xen | xen | >= 0 < 4.16.5-r3 | 4.16.5-r3 |
| xen | xen | >= 0 < 4.17.2-r3 | 4.17.2-r3 |
| xen | xen | >= 0 < 4.17.2-r3 | 4.17.2-r3 |
| xen | xen | >= 0 < 4.17.2-r3 | 4.17.2-r3 |
| xen | xen | >= 0 < 4.17.2-r3 | 4.17.2-r3 |
| xen | xen | >= 0 < 4.17.2-r3 | 4.17.2-r3 |
| xen | xen | >= 0 < 4.17.2-r3 | 4.17.2-r3 |
| xen | xen | >= 0 < 4.17.2+76-ge1f9cb16e2-1~deb12u1 | 4.17.2+76-ge1f9cb16e2-1~deb12u1 |
| xen | xen | >= 0 < 4.17.2+55-g0b56bed864-1 | 4.17.2+55-g0b56bed864-1 |
| xen | xen | >= 0 < 4.17.2+55-g0b56bed864-1 | 4.17.2+55-g0b56bed864-1 |
| xen | xen | >= 4.5.0 < 4.14.0 | 4.14.0 |
| xen | xen | >= 4.5.0 | — |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv10.0CRITICAL
vendor_debian10.0CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2023-34328: [This CNA information record relates to multiple CVEs; the
text explains which aspects/vulnerabilities correspond to which CVE
osv·2024-01-05·CVSS 10.0
CVE-2023-34328 [CRITICAL] CVE-2023-34328: [This CNA information record relates to multiple CVEs; the
text explains which aspects/vulnerabilities correspond to which CVE
[This CNA information record relates to multiple CVEs; the
text explains which aspects/vulnerabilities correspond to which CVE.]
AMD CPUs since ~2014 have extensions to normal x86 debugging functionality.
Xen supports guests using these extensions.
Unfortunately there are errors in Xen's handling of the guest state, leading
to denials of service.
1) CVE-2023-34327 - An HVM vCPU can end up operating in the context of
a previous vCPUs debug mask state.
2) CVE-2023-34328 - A PV vCPU can place a breakpoint over the live GDT.
This allows the PV vCPU to exploit XSA-156 / CVE-2015-8104 and lock
up the CPU entirely.
OSV
CVE-2023-34327: [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE
osv·2024-01-05·CVSS 10.0
CVE-2023-34327 [CRITICAL] CVE-2023-34327: [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE
[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] AMD CPUs since ~2014 have extensions to normal x86 debugging functionality. Xen supports guests using these extensions. Unfortunately there are errors in Xen's handling of the guest state, leading to denials of service. 1) CVE-2023-34327 - An HVM vCPU can end up operating in the context of a previous vCPUs debug mask state. 2) CVE-2023-34328 - A PV vCPU can place a breakpoint over the live GDT. This allows the PV vCPU to exploit XSA-156 / CVE-2015-8104 and lock up the CPU entirely.
OSV
CVE-2023-34328: [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE
osv·2024-01-05·CVSS 10.0
CVE-2023-34328 [CRITICAL] CVE-2023-34328: [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE
[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] AMD CPUs since ~2014 have extensions to normal x86 debugging functionality. Xen supports guests using these extensions. Unfortunately there are errors in Xen's handling of the guest state, leading to denials of service. 1) CVE-2023-34327 - An HVM vCPU can end up operating in the context of a previous vCPUs debug mask state. 2) CVE-2023-34328 - A PV vCPU can place a breakpoint over the live GDT. This allows the PV vCPU to exploit XSA-156 / CVE-2015-8104 and lock up the CPU entirely.
GHSA
GHSA-7fx2-c8rv-2w4f: [This CNA information record relates to multiple CVEs; the
text explains which aspects/vulnerabilities correspond to which CVE
ghsa_unreviewed·2024-01-05·CVSS 10.0
CVE-2023-34327 [CRITICAL] GHSA-7fx2-c8rv-2w4f: [This CNA information record relates to multiple CVEs; the
text explains which aspects/vulnerabilities correspond to which CVE
[This CNA information record relates to multiple CVEs; the
text explains which aspects/vulnerabilities correspond to which CVE.]
AMD CPUs since ~2014 have extensions to normal x86 debugging functionality.
Xen supports guests using these extensions.
Unfortunately there are errors in Xen's handling of the guest state, leading
to denials of service.
1) CVE-2023-34327 - An HVM vCPU can end up operating in the context of
a previous vCPUs debug mask state.
2) CVE-2023-34328 - A PV vCPU can place a breakpoint over the live GDT.
This allows the PV vCPU to exploit XSA-156 / CVE-2015-8104 and lock
up the CPU entirely.
OSV
CVE-2023-34327: [This CNA information record relates to multiple CVEs; the
text explains which aspects/vulnerabilities correspond to which CVE
osv·2024-01-05·CVSS 10.0
CVE-2023-34327 [CRITICAL] CVE-2023-34327: [This CNA information record relates to multiple CVEs; the
text explains which aspects/vulnerabilities correspond to which CVE
[This CNA information record relates to multiple CVEs; the
text explains which aspects/vulnerabilities correspond to which CVE.]
AMD CPUs since ~2014 have extensions to normal x86 debugging functionality.
Xen supports guests using these extensions.
Unfortunately there are errors in Xen's handling of the guest state, leading
to denials of service.
1) CVE-2023-34327 - An HVM vCPU can end up operating in the context of
a previous vCPUs debug mask state.
2) CVE-2023-34328 - A PV vCPU can place a breakpoint over the live GDT.
This allows the PV vCPU to exploit XSA-156 / CVE-2015-8104 and lock
up the CPU entirely.
GHSA
GHSA-fm4g-p248-j5wj: [This CNA information record relates to multiple CVEs; the
text explains which aspects/vulnerabilities correspond to which CVE
ghsa_unreviewed·2024-01-05·CVSS 10.0
CVE-2023-34328 [CRITICAL] GHSA-fm4g-p248-j5wj: [This CNA information record relates to multiple CVEs; the
text explains which aspects/vulnerabilities correspond to which CVE
[This CNA information record relates to multiple CVEs; the
text explains which aspects/vulnerabilities correspond to which CVE.]
AMD CPUs since ~2014 have extensions to normal x86 debugging functionality.
Xen supports guests using these extensions.
Unfortunately there are errors in Xen's handling of the guest state, leading
to denials of service.
1) CVE-2023-34327 - An HVM vCPU can end up operating in the context of
a previous vCPUs debug mask state.
2) CVE-2023-34328 - A PV vCPU can place a breakpoint over the live GDT.
This allows the PV vCPU to exploit XSA-156 / CVE-2015-8104 and lock
up the CPU entirely.
Citrix
Citrix Hypervisor Multiple Security Updates
vendor_citrix·2023-10-10·CVSS 7.8
CVE-2022-1304 [HIGH] Citrix Hypervisor Multiple Security Updates
Citrix Hypervisor Multiple Security Updates
of Problem Several issues have been discovered that affect Citrix Hypervisor 8.2 CU1 LTSR and may allow malicious privileged code in a guest VM to: i) Compromise an AMD-based host via a passed through PCI device: CVE-2023-34326 ii) Compromise the host when a specific administrative action is taken (see
CVE References: CVE-2022-1304, CVE-2023-20588, CVE-2023-34324, CVE-2023-34326, CVE-2023-34327
Affected Products: Citrix Hypervisor, XenServer
Severity: High
Remediation:
We have released hotfixes to address these issues. We recommend that affected customers install these hotfixes and follow the instructions in the linked articles as their update schedule permits. The hotfixes can be downloaded from the following locations: CTX575070 - https://su
Debian
CVE-2023-34328: xen - [This CNA information record relates to multiple CVEs; the text explains which a...
vendor_debian·2023·CVSS 10.0
CVE-2023-34328 [CRITICAL] CVE-2023-34328: xen - [This CNA information record relates to multiple CVEs; the text explains which a...
[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] AMD CPUs since ~2014 have extensions to normal x86 debugging functionality. Xen supports guests using these extensions. Unfortunately there are errors in Xen's handling of the guest state, leading to denials of service. 1) CVE-2023-34327 - An HVM vCPU can end up operating in the context of a previous vCPUs debug mask state. 2) CVE-2023-34328 - A PV vCPU can place a breakpoint over the live GDT. This allows the PV vCPU to exploit XSA-156 / CVE-2015-8104 and lock up the CPU entirely.
Scope: local
bookworm: resolved (fixed in 4.17.2+76-ge1f9cb16e2-1~deb12u1)
bullseye: open
forky: resolved (fixed in 4.17.2+55-g0b56bed864-1)
sid: resolved (fixed in 4.17.2+55-g0b56bed8
Debian
CVE-2023-34327: xen - [This CNA information record relates to multiple CVEs; the text explains which a...
vendor_debian·2023·CVSS 10.0
CVE-2023-34327 [CRITICAL] CVE-2023-34327: xen - [This CNA information record relates to multiple CVEs; the text explains which a...
[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] AMD CPUs since ~2014 have extensions to normal x86 debugging functionality. Xen supports guests using these extensions. Unfortunately there are errors in Xen's handling of the guest state, leading to denials of service. 1) CVE-2023-34327 - An HVM vCPU can end up operating in the context of a previous vCPUs debug mask state. 2) CVE-2023-34328 - A PV vCPU can place a breakpoint over the live GDT. This allows the PV vCPU to exploit XSA-156 / CVE-2015-8104 and lock up the CPU entirely.
Scope: local
bookworm: resolved (fixed in 4.17.2+76-ge1f9cb16e2-1~deb12u1)
bullseye: open
forky: resolved (fixed in 4.17.2+55-g0b56bed864-1)
sid: resolved (fixed in 4.17.2+55-g0b56bed8
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-01-05
Published