Detections
Analytics

Xen Project Denial of Service (XSA-295)

medium Nessus Plugin ID 135292

Language:

Synopsis

The remote Xen hypervisor installation is missing a security update.

Description

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by multiple denial of service (DoS) vulnerabilities :

 - A denial of service (DoS) vulnerability exists in the LoadExcl and StoreExcl operations due to a possible infinite loop. An unauthenticated, local attacker can exploit this issue, by accessing a memory region shared with the hypervisor while the hypervisor is performing an atomic operation on the same region, to cause the system to stop responding. (CVE-2019-17349)

 - A denial of service (DoS) vulnerability exists in the compare-and-exchange operation due to a possible infinite loop. An unauthenticated, local attacker can exploit this issue, by accessing a memory region shared with the hypervisor while the hypervisor is performing an atomic operation on the same region, to cause the system to stop responding. (CVE-2019-17350)

Only Arm processors are affected by these vulnerabilities. x86 processors are not vulnerable.

Note that Nessus has not attempted to exploit these issues but has instead relied only on the application's self-reported version number.

Solution

Apply the appropriate patch or workaround according to the vendor advisory.

See Also

https://xenbits.xen.org/xsa/advisory-295.html

Plugin Details

Severity: Medium

ID: 135292

File Name: xen_server_XSA-295.nasl

Version: 1.4

Type: local

Family: Misc.

Published: 4/10/2020

Updated: 3/19/2024

Configuration: Enable paranoid mode

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.6

CVSS v2

Risk Factor: Medium

Base Score: 4.9

Temporal Score: 3.6

Vector: CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C

CVSS Score Source: CVE-2019-17350

CVSS v3

Risk Factor: Medium

Base Score: 5.5

Temporal Score: 4.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/o:xen:xen

Required KB Items: installed_sw/Xen Hypervisor, Settings/ParanoidReport

Exploit Ease: No known exploits are available

Patch Publication Date: 6/13/2019

Vulnerability Publication Date: 6/13/2019

Reference Information

CVE: CVE-2019-17349, CVE-2019-17350

IAVB: 2019-B-0079-S