CVE-2007-6207

Xen < 3.1.1 - Unauthenticated Memory Read via mov_to_rr RID Value

Title source: llm

Description

Xen 3.x, possibly before 3.1.2, when running on IA64 systems, does not check the RID value for mov_to_rr, which allows a VTi domain to read memory of other domains.

References (8)

Core 8

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://osvdb.org/41341

Vendor Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2008-0154.html

Patch x_refsource_misc

http://lists.xensource.com/archives/html/xen-announce/2007-11/msg00000.html

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/27915

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/29236

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9471

Various Sources mailing-list x_refsource_mlist

http://lists.xensource.com/archives/html/xen-ia64-devel/2007-10/msg00189.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/26716

Scores

EPSS 0.0035

EPSS Percentile 26.8%

Details

CWE

CWE-20

Status published

Products (1)

xensource_inc/xen < 3.1.1

Published Dec 04, 2007

Tracked Since Feb 18, 2026