CVE

Id
46831  
CVE No.
CVE-2010-4247  
Status
Candidate  
Description
The do_block_io_op function in (1) drivers/xen/blkback/blkback.c and (2) drivers/xen/blktap/blktap.c in Xen before 3.4.0 for the Linux kernel 2.6.18, and possibly other versions, allows guest OS users to cause a denial of service (infinite loop and CPU consumption) via a large production request index to the blkback or blktap back-end drivers. NOTE: some of these details are obtained from third party information.  
Phase
Assigned (20101116)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
511706 46831 CVE-2010-4247 BUGTRAQ:20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console  View
511707 46831 CVE-2010-4247 URL:http://www.securityfocus.com/archive/1/archive/1/520102/100/0/threaded  View
511708 46831 CVE-2010-4247 MLIST:[oss-security] 20101123 CVE request: xen: request-processing loop is unbounded in blkback  View
511709 46831 CVE-2010-4247 URL:http://www.openwall.com/lists/oss-security/2010/11/23/1  View
511710 46831 CVE-2010-4247 MLIST:[oss-security] 20101124 Re: CVE request: xen: request-processing loop is unbounded in blkback  View
511711 46831 CVE-2010-4247 URL:http://www.openwall.com/lists/oss-security/2010/11/24/8  View
511712 46831 CVE-2010-4247 MISC:http://xenbits.xensource.com/linux-2.6.18-xen.hg?rev/7070d34f251c  View
511713 46831 CVE-2010-4247 MISC:http://xenbits.xensource.com/linux-2.6.18-xen.hg?rev/77f831cbb91d  View
511714 46831 CVE-2010-4247 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=656206  View
511715 46831 CVE-2010-4247 CONFIRM:http://www.vmware.com/security/advisories/VMSA-2011-0012.html  View
511716 46831 CVE-2010-4247 REDHAT:RHSA-2011:0004  View
511717 46831 CVE-2010-4247 URL:http://www.redhat.com/support/errata/RHSA-2011-0004.html  View
511718 46831 CVE-2010-4247 BID:45029  View
511719 46831 CVE-2010-4247 URL:http://www.securityfocus.com/bid/45029  View
511720 46831 CVE-2010-4247 SECUNIA:35093  View
511721 46831 CVE-2010-4247 URL:http://secunia.com/advisories/35093  View
511722 46831 CVE-2010-4247 SECUNIA:42789  View
511723 46831 CVE-2010-4247 URL:http://secunia.com/advisories/42789  View
511724 46831 CVE-2010-4247 SECUNIA:46397  View
511725 46831 CVE-2010-4247 URL:http://secunia.com/advisories/46397  View
511726 46831 CVE-2010-4247 VUPEN:ADV-2011-0024  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
31884 JVNDB-2011-002124 Linux kernel の ソケット実装におけるサービス運用妨害 (メモリ消費) の脆弱性 Linux kernel の net/core/sock.c 内にある ソケット実装は、受信したパケットのバックログを適切に処理しないため、サービス運用妨害 (メモリ消費) 状態となる脆弱性が存在します。 CVE-2010-4251 46831 6.1 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002124.html  View