NVD

Id
8778  
Name
CVE-2011-1898  
Description
Xen 4.1 before 4.1.1 and 4.0 before 4.0.2, when using PCI passthrough on Intel VT-d chipsets that do not have interrupt remapping, allows guest OS users to gain host OS privileges by "using DMA to generate MSI interrupts by writing to the interrupt injection registers."  
Reject
 
CVSS Version
2  
CVSS Score
7.4  
Severity
High  
CVSS Base Score
7.4  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
4.4  
CVSS Vector
(AV:A/AC:M/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-08-12  
Modified Date
2011-10-25  
Seq
2011-1898  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
50594 8778 CVE-2011-1898 FEDORA-2011-8421  View
50595 8778 CVE-2011-1898 FEDORA-2011-8403  View
50596 8778 CVE-2011-1898 openSUSE-SU-2011:0941  View
50597 8778 CVE-2011-1898 SUSE-SU-2011:0942  View
50598 8778 CVE-2011-1898 http://theinvisiblethings.blogspot.com/2011/05/following-white-rabbit-software-attacks.html  View
50599 8778 CVE-2011-1898 http://www.invisiblethingslab.com/resources/2011/Software%20Attacks%20on%20Intel%20VT-d.pdf  View
50600 8778 CVE-2011-1898 [xen-dev] 20110512 Xen security advisory CVE-2011-1898 - VT-d (PCI passthrough) MSI  View
50601 8778 CVE-2011-1898 http://xen.org/download/index_4.0.2.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31975 JVNDB-2011-002215 Xen におけるホスト OS の権限を取得される脆弱性 Xen には、割り込みの再マッピングを行わない Intel VT-d チップセット上で PCI パススルー機能を使用する時、ホスト OS の権限を取得される脆弱性が存在します。 CVE-2011-1898 49805 CVE-2011-1898 8778 7.4 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002215.html 2011-08-12 2011-09-15 View