CVE

Id
49810  
CVE No.
CVE-2011-1898  
Status
Candidate  
Description
Xen 4.1 before 4.1.1 and 4.0 before 4.0.2, when using PCI passthrough on Intel VT-d chipsets that do not have interrupt remapping, allows guest OS users to gain host OS privileges by "using DMA to generate MSI interrupts by writing to the interrupt injection registers."  
Phase
Assigned (20110504)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
540714 49810 CVE-2011-1898 MLIST:[xen-dev] 20110512 Xen security advisory CVE-2011-1898 - VT-d (PCI passthrough) MSI  View
540715 49810 CVE-2011-1898 URL:http://xen.1045712.n5.nabble.com/Xen-security-advisory-CVE-2011-1898-VT-d-PCI-passthrough-MSI-td4390298.html  View
540716 49810 CVE-2011-1898 MISC:http://theinvisiblethings.blogspot.com/2011/05/following-white-rabbit-software-attacks.html  View
540717 49810 CVE-2011-1898 MISC:http://www.invisiblethingslab.com/resources/2011/Software%20Attacks%20on%20Intel%20VT-d.pdf  View
540718 49810 CVE-2011-1898 CONFIRM:http://xen.org/download/index_4.0.2.html  View
540719 49810 CVE-2011-1898 FEDORA:FEDORA-2011-8421  View
540720 49810 CVE-2011-1898 URL:http://lists.fedoraproject.org/pipermail/package-announce/2011-June/062112.html  View
540721 49810 CVE-2011-1898 FEDORA:FEDORA-2011-8403  View
540722 49810 CVE-2011-1898 URL:http://lists.fedoraproject.org/pipermail/package-announce/2011-June/062139.html  View
540723 49810 CVE-2011-1898 SUSE:SUSE-SU-2011:0942  View
540724 49810 CVE-2011-1898 URL:http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00018.html  View
540725 49810 CVE-2011-1898 SUSE:openSUSE-SU-2011:0941  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
34350 JVNDB-2011-004592 Proofpoint Protection Server の関数における SQL インジェクションの脆弱性 Proofpoint Protection Server の Proofpoint Messaging Security Gateway の関数には、SQL インジェクションの脆弱性が存在します。 CVE-2011-1903 49810 7.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004592.html  View