CVE-2007-5907

Advisory lineage Upstream: 0 Downstream: 1

Downstream

RHSA-2008:0957

Modified

Published: 09 Nov 2007, 19:00

Last modified:07 Aug 2024, 15:47

Vulnerability Summary

Overall Risk (default)

low

19/100

CVSS Score

4.7 MEDIUM

v2.0 (nvd)

EPSS Score

0.06% LOW

0% probability 0.00%

KEV

Not listed

Ransomware

No reports

Public exploits

None found

Dark Web

Not detected

Timeline

09 Nov 2007, 19:00

Published

Vulnerability first disclosed

07 Aug 2024, 15:47

Last Modified

Vulnerability information updated

Description

Xen 3.1.1 does not prevent modification of the CR4 TSC from applications, which allows pv guests to cause a denial of service (crash).

CVSS Metrics

v2.0•MEDIUM•Score: 4.7AV:L/AC:M/Au:N/C:N/I:N/A:C

EPSS Trends

Current EPSS score: 0.06%• Percentile: 19%

Techniques & Countermeasures

CWE-264•Permissions, Privileges, and Access Controls
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.

Affected Systems

xensource_inc•xen
3.1.1