CVE-2007-5907
Xen 3.1.1 does not prevent modification of the CR4 TSC from applications, which allows pv guests...
4.7 Medium
Xen 3.1.1 does not prevent modification of the CR4 TSC from applications, which allows pv guests to cause a denial of service (crash).
Exploit likelihood
0.35%Down 0.9 points since Feb 4, 2022
What each source reports
NVD Score used
Xen 3.1.1 does not prevent modification of the CR4 TSC from applications, which allows pv guests to cause a denial of service (crash).
- Record
CVE-2007-5907- CVSS 2.0
- 4.7 Medium
AV:L/AC:M/Au:N/C:N/I:N/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Xen 3.1.1 does not prevent modification of the CR4 TSC from applications, which allows pv guests to cause a denial of service (crash).
- Record
CVE-2007-5907- Updated
- 2026-11-02
EUVDEUVD-2007-5877 No score
Xen 3.1.1 does not prevent modification of the CR4 TSC from applications, which allows pv guests to cause a denial of service (crash).
- Record
EUVD-2007-5877- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qgxw-cvg4-3v23 No score
Xen 3.1.1 does not prevent modification of the CR4 TSC from applications, which allows pv guests...
Xen 3.1.1 does not prevent modification of the CR4 TSC from applications, which allows pv guests to cause a denial of service (crash).
- Record
GHSA-qgxw-cvg4-3v23- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernelRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-PAERed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-PAE-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-PAE-develRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-debugRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-debug-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-debug-develRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-debuginfo-commonRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-develRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
Show 23 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-docRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-headersRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-xenRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-xen-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-xen-develRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernelRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-PAERed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-PAE-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-PAE-develRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-debugRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-debug-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-debug-develRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-debuginfo-commonRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-develRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-docRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-headersRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-kdumpRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-kdump-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-kdump-develRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-xenRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-xen-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
kernel-xen-develRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:2.6.18-92.1.18.el5 | 0:2.6.18-92.1.18.el5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-5907 is a medium vulnerability (CVSS 4.7) in Xensource Inc Xen, published November 9, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.35%, the 29th percentile. No source names a fixed version.
References
secunia.com/advisories/32485
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10380
novell.com/linux/security/advisories/suse_security_summary_report.html
redhat.com/support/errata/RHSA-2008-0957.html
Show 58 moreShow less
securityfocus.com/bid/27219
lists.xensource.com/archives/html/xen-devel/2007-10/msg00932.html
lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html
nvd.nist.gov/vuln/detail/CVE-2007-5907
github.com/advisories/GHSA-qgxw-cvg4-3v23
access.redhat.com/errata/RHSA-2008:0957
bugzilla.redhat.com/show_bug.cgi?id=458021
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0957.json
cve.org/CVERecord?id=CVE-2006-5755