tools/libxc/xc_dom_bzimageloader.c in Xen 3.2, 3.3, 4.0, and 4.1 allows local users to cause a denial of service (management software infinite loop and management domain resource consumption) via unspecified vectors related to Lack of error checking in the decompression loop.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Xen | Citrix | 3.2.0 (including) | 3.2.0 (including) |
| Xen | Citrix | 3.3.0 (including) | 3.3.0 (including) |
| Xen | Citrix | 4.0.0 (including) | 4.0.0 (including) |
| Xen | Citrix | 4.1.0 (including) | 4.1.0 (including) |
| Red Hat Enterprise Linux 5 | RedHat | xen-0:3.0.3-120.el5_6.2 | * |
| Xen | Ubuntu | upstream | * |
| Xen-3.1 | Ubuntu | hardy | * |
| Xen-3.2 | Ubuntu | hardy | * |
| Xen-3.3 | Ubuntu | lucid | * |
| Xen-3.3 | Ubuntu | maverick | * |
| Xen-3.3 | Ubuntu | natty | * |