The (1) domain_pirq_to_emuirq and (2) physdev_unmap_pirq functions in Xen 2.2 allows local guest OS administrators to cause a denial of service (Xen crash) via a crafted pirq value that triggers an out-of-bounds read.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Xen | Xen | 2.2.0 (including) | 2.2.0 (including) |
Xen | Ubuntu | devel | * |
Xen | Ubuntu | oneiric | * |
Xen | Ubuntu | precise | * |
Xen | Ubuntu | quantal | * |