CVE-2007-5906 Denial of service in n/a
A local guest user can crash the Xen hypervisor by manipulating debug registers, causing a denial of service for all hosted virtual machines.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2007-5906?
CVE-2007-5906 is a medium-severity denial of service vulnerability in n/a, published on 9 Nov 2007. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Xen 3.1.1 allows virtual guest system users to cause a denial of service (hypervisor crash) by using a debug register (DR7) to set certain breakpoints.
Which versions are affected by CVE-2007-5906?
It affects 1 product.
Products include Xensource Inc Xen.
How do I fix CVE-2007-5906?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2007-5906 being exploited?
There is no known exploitation of CVE-2007-5906 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2007-4993 Command injection in n/a
- CVE-2007-3919 Path traversal in n/a
- CVE-2007-5907 Privilege escalation in n/a
- CVE-2008-1619 The ssm_i emulation in Xen 5.1 on IA64 architectures allows attackers to cause a denial of service (dom0 panic) via certain traffic, as demo
- CVE-2007-6207 Information disclosure in n/a
Sources
Also known as GHSA-f59f-86pc-5j7q.