← back
CVE-2008-1952

CVE-2008-1952

EPSS 0.4%
The backend for XenSource Xen Para Virtualized Frame Buffer (PVFB) in Xen ioemu does not properly restrict the frame buffer size, which allows attackers to cause a denial of service (crash) by mapping an arbitrary amount of guest memory.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://lists.xensource.com/archives/html/xen-devel/2008-05/msg00421.htmlhttp://secunia.com/advisories/32088https://exchange.xforce.ibmcloud.com/vulnerabilities/43362https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11189https://rhn.redhat.com/errata/RHSA-2008-0892.htmlhttp://www.openwall.com/lists/oss-security/2008/05/21/9http://www.securityfocus.com/bid/30646http://www.securitytracker.com/id?1020957http://xenbits.xensource.com/xen-unstable.hg?rev/9044705960cb30cec385bdca7305bcf7db096721