CVE-2009-1758 Denial of service in n/a
Guest user applications can cause a denial of service in the guest OS by triggering a segmentation fault in specific address ranges within the Xen hypervisor.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2009-1758?
CVE-2009-1758 is a medium-severity denial of service vulnerability in Xen Xen, published on 22 May 2009. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The hypervisor_callback function in Xen, possibly before 3.4.0, as applied to the Linux kernel 2.6.30-rc4, 2.6.18, and probably other versions allows guest user applications to cause a denial of service (kernel oops) of the guest OS by triggering a segmentation fault in "certain address ranges."
Weakness: CWE-399
Which versions are affected by CVE-2009-1758?
It affects 1 product.
Products include Xen Xen.
How do I fix CVE-2009-1758?
Upgrade to a fixed version.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2009-1758 being exploited?
There is no known exploitation of CVE-2009-1758 in the wild and no public exploit code.
Other vulnerabilities in Xen Xen
Sources
Also known as GHSA-qjvg-f232-r4p7.