oxenstored in Xen 4.1.x, Xen 4.2.x, and xen-unstable does not properly consider the state of the Xenstore ring during read operations, which allows guest OS users to cause a denial of service (daemon crash and host-control outage, or memory consumption) or obtain sensitive control-plane data by leveraging guest administrative access.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Xen | Xen | 4.1.0 (including) | 4.1.0 (including) |
Xen | Xen | 4.1.1 (including) | 4.1.1 (including) |
Xen | Xen | 4.1.2 (including) | 4.1.2 (including) |
Xen | Xen | 4.1.3 (including) | 4.1.3 (including) |
Xen | Xen | 4.1.4 (including) | 4.1.4 (including) |
Xen | Ubuntu | devel | * |
Xen | Ubuntu | oneiric | * |
Xen | Ubuntu | precise | * |
Xen | Ubuntu | quantal | * |