p PatchFirst

CVE-2018-7542

CVE-2018-7542

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An issue was discovered in Xen 4.8.x through 4.10.x allowing x86 PVH guest OS users to cause a denial of service (NULL pointer dereference and hypervisor crash) by leveraging the mishandling of configurations that lack a Local APIC.

CVSS 6.5 · Medium · EPSS 0.4% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • xen Debian:12

    Affected ranges
    • ECOSYSTEM: < 4.8.3+comet2+shim4.10.0+comet3-1+deb9u5

    Update to 4.8.3+comet2+shim4.10.0+comet3-1+deb9u5

  • xen Debian:13

    Affected ranges
    • ECOSYSTEM: < 4.8.3+comet2+shim4.10.0+comet3-1+deb9u5

    Update to 4.8.3+comet2+shim4.10.0+comet3-1+deb9u5

  • xen Debian:14

    Affected ranges
    • ECOSYSTEM: < 4.8.3+comet2+shim4.10.0+comet3-1+deb9u5

    Update to 4.8.3+comet2+shim4.10.0+comet3-1+deb9u5

Original sources

Check your server →