VDB

CVE-2008-4405

CVE-2008-4405 PUBLISHED

Reported by mitre · Published October 3, 2008

xend in Xen 3.0.3 does not properly limit the contents of the /local/domain xenstore directory tree, and does not properly restrict a guest VM's write access within this tree, which allows guest OS users to cause a denial of service and possibly have unspecified other impact by writing to (1) console/tty, (2) console/limit, or (3) image/device-model-pid. NOTE: this issue was originally reported as an issue in libvirt 0.3.3 and xenstore, but CVE is considering the core issue to be related to Xen.

Affected Products

VendorProductVersions
n/an/an/a
n/an/a*, n/a, n/a

Timeline

  • Oct 3, 2008 CVE Published
  • Feb 4, 2022 EPSS Score
  • Mar 29, 2022 EPSS Score
  • May 22, 2022 EPSS Score
  • Jul 15, 2022 EPSS Score
  • Sep 7, 2022 EPSS Score
  • Dec 23, 2022 EPSS Score
  • Feb 14, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Apr 9, 2023 EPSS Score
  • Jun 1, 2023 EPSS Score
  • Jul 25, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›