CVE-2023-34328
published 2024-01-05CVE-2023-34328: [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] AMD CPUs since ~2014 have…
PriorityP420medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.26%
17.0th percentile
[This CNA information record relates to multiple CVEs; the
text explains which aspects/vulnerabilities correspond to which CVE.]
AMD CPUs since ~2014 have extensions to normal x86 debugging functionality.
Xen supports guests using these extensions.
Unfortunately there are errors in Xen's handling of the guest state, leading
to denials of service.
1) CVE-2023-34327 - An HVM vCPU can end up operating in the context of
a previous vCPUs debug mask state.
2) CVE-2023-34328 - A PV vCPU can place a breakpoint over the live GDT.
This allows the PV vCPU to exploit XSA-156 / CVE-2015-8104 and lock
up the CPU entirely.
Affected
15 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | xen | < xen 4.17.2+76-ge1f9cb16e2-1~deb12u1 (bookworm) | xen 4.17.2+76-ge1f9cb16e2-1~deb12u1 (bookworm) |
| xen | xen | >= 0 < 4.15.5-r3 | 4.15.5-r3 |
| xen | xen | >= 0 < 4.16.5-r3 | 4.16.5-r3 |
| xen | xen | >= 0 < 4.16.5-r3 | 4.16.5-r3 |
| xen | xen | >= 0 < 4.17.2-r3 | 4.17.2-r3 |
| xen | xen | >= 0 < 4.17.2-r3 | 4.17.2-r3 |
| xen | xen | >= 0 < 4.17.2-r3 | 4.17.2-r3 |
| xen | xen | >= 0 < 4.17.2-r3 | 4.17.2-r3 |
| xen | xen | >= 0 < 4.17.2-r3 | 4.17.2-r3 |
| xen | xen | >= 0 < 4.17.2-r3 | 4.17.2-r3 |
| xen | xen | >= 0 < 4.17.2+76-ge1f9cb16e2-1~deb12u1 | 4.17.2+76-ge1f9cb16e2-1~deb12u1 |
| xen | xen | >= 0 < 4.17.2+55-g0b56bed864-1 | 4.17.2+55-g0b56bed864-1 |
| xen | xen | >= 0 < 4.17.2+55-g0b56bed864-1 | 4.17.2+55-g0b56bed864-1 |
| xen | xen | >= 4.5.0 < 4.14.0 | 4.14.0 |
| xen | xen | >= 4.5.0 | — |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv10.0CRITICAL
vendor_debian10.0CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
CVE-2023-34328: [This CNA information record relates to multiple CVEs; the
text explains which aspects/vulnerabilities correspond to which CVE
osv·2024-01-05·CVSS 10.0
CVE-2023-34328 [CRITICAL] CVE-2023-34328: [This CNA information record relates to multiple CVEs; the
text explains which aspects/vulnerabilities correspond to which CVE
[This CNA information record relates to multiple CVEs; the
text explains which aspects/vulnerabilities correspond to which CVE.]
AMD CPUs since ~2014 have extensions to normal x86 debugging functionality.
Xen supports guests using these extensions.
Unfortunately there are errors in Xen's handling of the guest state, leading
to denials of service.
1) CVE-2023-34327 - An HVM vCPU can end up operating in the context of
a previous vCPUs debug mask state.
2) CVE-2023-34328 - A PV vCPU can place a breakpoint over the live GDT.
This allows the PV vCPU to exploit XSA-156 / CVE-2015-8104 and lock
up the CPU entirely.
OSV
CVE-2023-34327: [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE
osv·2024-01-05·CVSS 10.0
CVE-2023-34327 [CRITICAL] CVE-2023-34327: [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE
[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] AMD CPUs since ~2014 have extensions to normal x86 debugging functionality. Xen supports guests using these extensions. Unfortunately there are errors in Xen's handling of the guest state, leading to denials of service. 1) CVE-2023-34327 - An HVM vCPU can end up operating in the context of a previous vCPUs debug mask state. 2) CVE-2023-34328 - A PV vCPU can place a breakpoint over the live GDT. This allows the PV vCPU to exploit XSA-156 / CVE-2015-8104 and lock up the CPU entirely.
OSV
CVE-2023-34328: [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE
osv·2024-01-05·CVSS 10.0
CVE-2023-34328 [CRITICAL] CVE-2023-34328: [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE
[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] AMD CPUs since ~2014 have extensions to normal x86 debugging functionality. Xen supports guests using these extensions. Unfortunately there are errors in Xen's handling of the guest state, leading to denials of service. 1) CVE-2023-34327 - An HVM vCPU can end up operating in the context of a previous vCPUs debug mask state. 2) CVE-2023-34328 - A PV vCPU can place a breakpoint over the live GDT. This allows the PV vCPU to exploit XSA-156 / CVE-2015-8104 and lock up the CPU entirely.
GHSA
GHSA-7fx2-c8rv-2w4f: [This CNA information record relates to multiple CVEs; the
text explains which aspects/vulnerabilities correspond to which CVE
ghsa_unreviewed·2024-01-05·CVSS 10.0
CVE-2023-34327 [CRITICAL] GHSA-7fx2-c8rv-2w4f: [This CNA information record relates to multiple CVEs; the
text explains which aspects/vulnerabilities correspond to which CVE
[This CNA information record relates to multiple CVEs; the
text explains which aspects/vulnerabilities correspond to which CVE.]
AMD CPUs since ~2014 have extensions to normal x86 debugging functionality.
Xen supports guests using these extensions.
Unfortunately there are errors in Xen's handling of the guest state, leading
to denials of service.
1) CVE-2023-34327 - An HVM vCPU can end up operating in the context of
a previous vCPUs debug mask state.
2) CVE-2023-34328 - A PV vCPU can place a breakpoint over the live GDT.
This allows the PV vCPU to exploit XSA-156 / CVE-2015-8104 and lock
up the CPU entirely.
OSV
CVE-2023-34327: [This CNA information record relates to multiple CVEs; the
text explains which aspects/vulnerabilities correspond to which CVE
osv·2024-01-05·CVSS 10.0
CVE-2023-34327 [CRITICAL] CVE-2023-34327: [This CNA information record relates to multiple CVEs; the
text explains which aspects/vulnerabilities correspond to which CVE
[This CNA information record relates to multiple CVEs; the
text explains which aspects/vulnerabilities correspond to which CVE.]
AMD CPUs since ~2014 have extensions to normal x86 debugging functionality.
Xen supports guests using these extensions.
Unfortunately there are errors in Xen's handling of the guest state, leading
to denials of service.
1) CVE-2023-34327 - An HVM vCPU can end up operating in the context of
a previous vCPUs debug mask state.
2) CVE-2023-34328 - A PV vCPU can place a breakpoint over the live GDT.
This allows the PV vCPU to exploit XSA-156 / CVE-2015-8104 and lock
up the CPU entirely.
GHSA
GHSA-fm4g-p248-j5wj: [This CNA information record relates to multiple CVEs; the
text explains which aspects/vulnerabilities correspond to which CVE
ghsa_unreviewed·2024-01-05·CVSS 10.0
CVE-2023-34328 [CRITICAL] GHSA-fm4g-p248-j5wj: [This CNA information record relates to multiple CVEs; the
text explains which aspects/vulnerabilities correspond to which CVE
[This CNA information record relates to multiple CVEs; the
text explains which aspects/vulnerabilities correspond to which CVE.]
AMD CPUs since ~2014 have extensions to normal x86 debugging functionality.
Xen supports guests using these extensions.
Unfortunately there are errors in Xen's handling of the guest state, leading
to denials of service.
1) CVE-2023-34327 - An HVM vCPU can end up operating in the context of
a previous vCPUs debug mask state.
2) CVE-2023-34328 - A PV vCPU can place a breakpoint over the live GDT.
This allows the PV vCPU to exploit XSA-156 / CVE-2015-8104 and lock
up the CPU entirely.
Debian
CVE-2023-34328: xen - [This CNA information record relates to multiple CVEs; the text explains which a...
vendor_debian·2023·CVSS 10.0
CVE-2023-34328 [CRITICAL] CVE-2023-34328: xen - [This CNA information record relates to multiple CVEs; the text explains which a...
[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] AMD CPUs since ~2014 have extensions to normal x86 debugging functionality. Xen supports guests using these extensions. Unfortunately there are errors in Xen's handling of the guest state, leading to denials of service. 1) CVE-2023-34327 - An HVM vCPU can end up operating in the context of a previous vCPUs debug mask state. 2) CVE-2023-34328 - A PV vCPU can place a breakpoint over the live GDT. This allows the PV vCPU to exploit XSA-156 / CVE-2015-8104 and lock up the CPU entirely.
Scope: local
bookworm: resolved (fixed in 4.17.2+76-ge1f9cb16e2-1~deb12u1)
bullseye: open
forky: resolved (fixed in 4.17.2+55-g0b56bed864-1)
sid: resolved (fixed in 4.17.2+55-g0b56bed8
Debian
CVE-2023-34327: xen - [This CNA information record relates to multiple CVEs; the text explains which a...
vendor_debian·2023·CVSS 10.0
CVE-2023-34327 [CRITICAL] CVE-2023-34327: xen - [This CNA information record relates to multiple CVEs; the text explains which a...
[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] AMD CPUs since ~2014 have extensions to normal x86 debugging functionality. Xen supports guests using these extensions. Unfortunately there are errors in Xen's handling of the guest state, leading to denials of service. 1) CVE-2023-34327 - An HVM vCPU can end up operating in the context of a previous vCPUs debug mask state. 2) CVE-2023-34328 - A PV vCPU can place a breakpoint over the live GDT. This allows the PV vCPU to exploit XSA-156 / CVE-2015-8104 and lock up the CPU entirely.
Scope: local
bookworm: resolved (fixed in 4.17.2+76-ge1f9cb16e2-1~deb12u1)
bullseye: open
forky: resolved (fixed in 4.17.2+55-g0b56bed864-1)
sid: resolved (fixed in 4.17.2+55-g0b56bed8
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-01-05
Published