CVEvulnerability
CVE-2011-1898
7.4 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-08-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.4 HIGH — AV:A/AC:M/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
Xen 4.1 before 4.1.1 and 4.0 before 4.0.2, when using PCI passthrough on Intel VT-d chipsets that do not have interrupt remapping, allows guest OS users to gain host OS privileges by "using DMA to generate MSI interrupts by writing to the interrupt injection registers."
Affected configurations
• citrix xen 4.0.0
• citrix xen 4.0.1
• citrix xen 4.1.0
Related
Weakness · not in database (1)
References
- http://lists.fedoraproject.org/pipermail/package-announce/2011-June/062112.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2011-June/062139.html lists.fedoraproject.org
- http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00017.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00018.html lists.opensuse.org
- http://theinvisiblethings.blogspot.com/2011/05/following-white-rabbit-software-attacks.html theinvisiblethings.blogspot.com
- http://www.invisiblethingslab.com/resources/2011/Software%20Attacks%20on%20Intel%20VT-d.pdf Exploit
- http://xen.1045712.n5.nabble.com/Xen-security-advisory-CVE-2011-1898-VT-d-PCI-passthrough-MSI-td4390298.html xen.1045712.n5.nabble.com
- http://xen.org/download/index_4.0.2.html Patch
- http://lists.fedoraproject.org/pipermail/package-announce/2011-June/062112.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2011-June/062139.html lists.fedoraproject.org
- http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00017.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00018.html lists.opensuse.org
- http://theinvisiblethings.blogspot.com/2011/05/following-white-rabbit-software-attacks.html theinvisiblethings.blogspot.com
- http://www.invisiblethingslab.com/resources/2011/Software%20Attacks%20on%20Intel%20VT-d.pdf Exploit
- http://xen.1045712.n5.nabble.com/Xen-security-advisory-CVE-2011-1898-VT-d-PCI-passthrough-MSI-td4390298.html xen.1045712.n5.nabble.com
- http://xen.org/download/index_4.0.2.html Patch