CVE-2024-45818 — Vulnetix

CVE-2024-45818 PUBLISHED

Es existiert eine Schwachstelle in Xen. Das Problem besteht im Code zur Beschleunigung von VGA-Speicherzugriffen für HVM-Gäste. Ein Angreifer aus einer HVM Gastmaschine kann kann diese Schwachstelle ausnutzen, um den gesamten Host zu blockieren und somit einen Denial of Service auszulösen.

EPSS 0.27% · 51.2th percentile

Risk Scores

EPSS Score

0.27%

51.2th percentile

Affected Products

Vendor	Product	Versions
Open Source	Open Source Xen 4.16.x
Open Source	Open Source Xen 4.17.x
SUSE	SUSE openSUSE
Fedora	Fedora Linux
Open Source	Open Source Xen 4.18.x
SUSE	SUSE Linux
Open Source	Open Source Xen 4.19.x
Debian	Debian Linux

Exploit Intelligence

Deadlock in x86 HVM standard VGA handling (hackerone)
Deadlock in x86 HVM standard VGA handling (hackerone)
Deadlock in x86 HVM standard VGA handling (hackerone)
CIRCL seen: CVE-2024-45818 (circl-sighting)
CIRCL seen: CVE-2024-45818 (circl-sighting)
CIRCL seen: CVE-2024-45818 (circl-sighting)
CIRCL seen: CVE-2024-45818 (circl-sighting)
http://www.openwall.com/lists/oss-security/2024/11/12/2 (circl)
http://xenbits.xen.org/xsa/advisory-463.html (circl)
https://xenbits.xenproject.org/xsa/advisory-463.html (circl)

Timeline

CVE Published
Dec 19, 2024 PoC Published
Dec 19, 2024 PoC Published
Dec 20, 2024 EPSS Score
Jan 5, 2025 EPSS Score
Jan 22, 2025 EPSS Score
Feb 7, 2025 EPSS Score
Feb 24, 2025 EPSS Score
Mar 7, 2025 PoC Published
Mar 12, 2025 EPSS Score
Mar 14, 2025 Coalition ESS Score
Mar 28, 2025 EPSS Score

References

Open in Interactive Console →