Information

AdvisoryXSA-1
Public release 2011-03-14 11:00
Updated 2011-03-14 11:00
Version 1
CVE(s) CVE-2011-1166
Title Host crash due to failure to correctly validate PV kernel execution state

Files

advisory-1.txt (signed advisory file)

Advisory


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

             Xen Security Advisory CVE-2011-1166 / XSA-1
  Host crash due to failure to correctly validate PV kernel execution state

ISSUE DESCRIPTION
=================

Cannot specify user mode execution without specifying user-mode
pagetables.  Failure to validate this allows a malicious or buggy
64 bit PV guest to crash the host.

nb: predates vulnerability handling process and therefore no formal
announcement
-----BEGIN PGP SIGNATURE-----

iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAmnLmaAMHHBncEB4ZW4u
b3JnAAoJEIP+FMlX6CvZ/8wH/jai7710M8fFEiuhizfPnApBt+4bI+0Q+EB8Wg9W
ISY9Dll3uydSxPtXlg9aroYAOqZS0m4MBgL1IMcOXolcNZoXSY9FB1+RXih/LldW
H2soNv8S1Jho5EmHUaS5PGDyJALQ+iSuE4x96tguf4XE4LaIF/h2sHKBnTzfBwlv
ZLufoaLitS5Hn6YWpxaA5L9XG7zgnd9TCbOTL05efrv/UiFdDyktVZ17314Ot5bG
B2/G7U99yGpSrCYttQ3e0DJC1RYlmfVv/A/4hWd5LxFX1FeOjKTmScHj7otcJPvc
23Qg6b4hHXcFVBHGRFnKmiWu+LrEibUQoPmy1xnV9CGow/s=
=usmh
-----END PGP SIGNATURE-----


Xenproject.org Security Team