Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2018-19962

An issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS users to gain host OS privileges because small IOMMU mappings are unsafely combined into larger ones.

  • Published: Dec 8, 2018
  • Updated: Apr 13, 2023
  • CVE: CVE-2018-19962
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.8
  • AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

CVSS v2:

  • Severity: Medium
  • Score: 6.9
  • AV:L/AC:M/Au:N/C:C/I:C/A:C

CWEs:

Software From Fixed in
xen / xen - 4.11.1.x
debian / debian_linux 9.0 9.0.x
citrix / xenserver 7.0 7.0.x
citrix / xenserver 7.5 7.5.x
citrix / xenserver 7.6 7.6.x
citrix / xenserver 7.1-cu1 7.1-cu1.x