CVE-2011-1583 Integer overflow in n/a

What is CVE-2011-1583?

CVE-2011-1583 is a medium-severity vulnerability in n/a, published on 12 Aug 2011. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Multiple integer overflows in tools/libxc/xc_dom_bzimageloader.c in Xen 3.2, 3.3, 4.0, and 4.1 allow local users to cause a denial of service and possibly execute arbitrary code via a crafted paravirtualised guest kernel image that triggers (1) a buffer overflow during a decompression loop or (2) an out-of-bounds read in the loader involving unspecified length fields.

Weakness: CWE-189

Which versions are affected by CVE-2011-1583?

It affects 1 product.

Products include Citrix Xen.

How do I fix CVE-2011-1583?

Apply the vendor's patch.

Is CVE-2011-1583 being exploited?

There is no known exploitation of CVE-2011-1583 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2011-1898 Privilege escalation in n/a High 7.4
• CVE-2008-5716 Missing authorization in n/a High 7.2
• CVE-2008-4405 Missing authorization in n/a High 7.2
• CVE-2010-4255 Denial of service in n/a Medium 6.1
• CVE-2010-4238 Denial of service in n/a Medium 5.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2011-1583, GHSA-4qc2-w83m-rm23.