CVE-2008-1952

Advisory lineage Upstream: 0 Downstream: 1

Downstream

RHSA-2008:0892

Modified

Published: 23 Jun 2008, 19:00

Last modified:07 Aug 2024, 08:40

Vulnerability Summary

Overall Risk (default)

minimal

8/100

CVSS Score

2.1 LOW

v2.0 (nvd)

EPSS Score

0.08% LOW

0% probability 0.00%

KEV

Not listed

Ransomware

No reports

Public exploits

None found

Dark Web

Not detected

Timeline

23 Jun 2008, 19:00

Published

Vulnerability first disclosed

07 Aug 2024, 08:40

Last Modified

Vulnerability information updated

Description

The backend for XenSource Xen Para Virtualized Frame Buffer (PVFB) in Xen ioemu does not properly restrict the frame buffer size, which allows attackers to cause a denial of service (crash) by mapping an arbitrary amount of guest memory.

CVSS Metrics

v2.0•LOW•Score: 2.1AV:L/AC:L/Au:N/C:N/I:N/A:P

EPSS Trends

Current EPSS score: 0.08%• Percentile: 23%

Techniques & Countermeasures

CWE-119•Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.