The acceleration support for the REP MOVS instruction in Xen 4.4.x, 3.2.x, and earlier lacks properly bounds checking for memory mapped I/O (MMIO) emulated in the hypervisor, which allows local HVM guests to cause a denial of service (host crash) via unspecified vectors.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Enterprise_linux | Redhat | 5.0 (including) | 5.0 (including) |
| Enterprise_linux_desktop | Redhat | 5.0 (including) | 5.0 (including) |
| Xen | Ubuntu | devel | * |
| Xen | Ubuntu | precise | * |
| Xen | Ubuntu | trusty | * |
| Xen | Ubuntu | upstream | * |
| Xen | Ubuntu | utopic | * |
| Xen | Ubuntu | vivid | * |
| Xen-3.3 | Ubuntu | lucid | * |
| Xen-3.3 | Ubuntu | upstream | * |
| Red Hat Enterprise Linux 5 | RedHat | kernel-0:2.6.18-404.el5 | * |