CVE-2019-19577: fedoraproject fedora
Vulnerability summary
CVE-2019-19577 is a high (CVSS 7.2) vulnerability in fedoraproject fedora. EPSS estimates a 0.52% chance of exploitation in the next 30 days, higher than 44.3% of scored vulnerabilities.
Not severe (CVSS 7.2, physical access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 11 · Related 10Timeline
- 11-12-2019PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
An issue was discovered in Xen through 4.12.x allowing x86 AMD HVM guest OS users to cause a denial of service or possibly gain privileges by triggering data-structure access during pagetable-height updates. When running on AMD systems with an IOMMU, Xen attempted to dynamically adapt the number of levels of pagetables (the pagetable height) in the IOMMU according to the guest's address space size. The code to select and update the height had several bugs. Notably, the update was done without taking a lock which is necessary for safe operation. A malicious guest administrator can cause Xen to access data structures while they are being modified, causing Xen to crash. Privilege escalation is thought to be very difficult but cannot be ruled out. Additionally, there is a potential memory leak of 4kb per guest boot, under memory pressure. Only Xen on AMD CPUs is vulnerable. Xen running on Intel CPUs is not vulnerable. ARM systems are not vulnerable. Only systems where guests are given direct access to physical devices are vulnerable. Systems which do not use PCI pass-through are not vulnerable. Only HVM guests can exploit the vulnerability. PV and PVH guests cannot. All versions of Xen with IOMMU support are vulnerable.
CVSS metrics
5 scores · 4 sources · 2 versions- OSV · AlpineEcosystem advisory · calculated7.2HighCVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- OSV · UbuntuEcosystem advisory · calculated7.2HighCVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.2HighCVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
EPSS trend
Probability
0.52%
Chance of exploitation in the next 30 days
Percentile
44%
Versus all other CVEs
30-day change
Increase +0.02 pp
From 0.50% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-401Missing Release of Memory after Effective LifetimeThe product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.
- CWE-662Improper SynchronizationThe product utilizes multiple threads, processes, components, or systems to allow temporary access to a shared resource that can only be exclusive to one process at a time, but it does not properly synchronize these actions, which might cause simultaneous accesses of this resource by multiple threads or processes.
Affected systems
Known conditions: physical access, administrative account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Alpine1 product
- xen< 4.12.2-r0 | < 4.13.0-r0 | < 4.10.4-r2 | < 4.11.3-r1
Debian1 product
- xen< 4.11.3+24-g14b62ab3e5-1
Fedoraproject1 product
- fedoraEOL31
Ubuntu1 product
- xenAll versions (No fix recorded)
Xen1 product
- xen≤ 4.12.1
5 vendors · 5 products
