CVE-2011-1583
Multiple integer overflows in tools/libxc/xc_dom_bzimageloader.c in Xen 3.2, 3.3, 4.0, and 4.1...
Multiple integer overflows in tools/libxc/xc_dom_bzimageloader.c in Xen 3.2, 3.3, 4.0, and 4.1 allow local users to cause a denial of service and possibly execute arbitrary code via a crafted paravirtualised guest kernel image that triggers (1) a buffer overflow during a decompression loop or (2) an out-of-bounds read in the loader involving unspecified length fields.
Exploit likelihood
What each source reports
NVD Score used
Multiple integer overflows in tools/libxc/xc_dom_bzimageloader.c in Xen 3.2, 3.3, 4.0, and 4.1 allow local users to cause a denial of service and possibly execute arbitrary code via a crafted paravirtualised guest kernel image that triggers (1) a buffer overflow during a decompression loop or (2) an out-of-bounds read in the loader involving unspecified length fields.
- Record
CVE-2011-1583- CVSS 2.0
- 6.9 Medium
AV:L/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE List No score
Multiple integer overflows in tools/libxc/xc_dom_bzimageloader.c in Xen 3.2, 3.3, 4.0, and 4.1 allow local users to cause a denial of service and possibly execute arbitrary code via a crafted paravirtualised guest kernel image that triggers (1) a buffer overflow during a decompression loop or (2) an out-of-bounds read in the loader involving unspecified length fields.
- Record
CVE-2011-1583- Updated
- 2026-11-02
EUVDEUVD-2011-1583 No score
Multiple integer overflows in tools/libxc/xc_dom_bzimageloader.c in Xen 3.2, 3.3, 4.0, and 4.1 allow local users to cause a denial of service and possibly execute arbitrary code via a crafted paravirtualised guest kernel image that triggers (1) a buffer overflow during a decompression loop or (2) an out-of-bounds read in the loader involving unspecified length fields.
- Record
EUVD-2011-1583- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4qc2-w83m-rm23 No score
Multiple integer overflows in tools/libxc/xc_dom_bzimageloader.c in Xen 3.2, 3.3, 4.0, and 4.1...
Multiple integer overflows in tools/libxc/xc_dom_bzimageloader.c in Xen 3.2, 3.3, 4.0, and 4.1 allow local users to cause a denial of service and possibly execute arbitrary code via a crafted paravirtualised guest kernel image that triggers (1) a buffer overflow during a decompression loop or (2) an out-of-bounds read in the loader involving unspecified length fields.
- Record
GHSA-4qc2-w83m-rm23- Updated
- 2026-11-02
OSV No score
Multiple integer overflows in tools/libxc/xc_dom_bzimageloader.c in Xen 3.2, 3.3, 4.0, and 4.1 allow local users to cause a denial of service and possibly execute arbitrary code via a crafted paravirtualised guest kernel image that triggers (1) a buffer overflow during a decompression loop or (2) an out-of-bounds read in the loader involving unspecified length fields.
- Record
CVE-2011-1583- Updated
- 2026-11-02
OSVDEBIAN-CVE-2011-1583 No score
Multiple integer overflows in tools/libxc/xc_dom_bzimageloader.c in Xen 3.2, 3.3, 4.0, and 4.1 allow local users to cause a denial of service and possibly execute arbitrary code via a crafted paravirtualised guest kernel image that triggers (1) a buffer overflow during a decompression loop or (2) an out-of-bounds read in the loader involving unspecified length fields.
- Record
DEBIAN-CVE-2011-1583- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
xenDebian:12 |
before 4.1.1-1 | 4.1.1-1 |
xenDebian:13 |
before 4.1.1-1 | 4.1.1-1 |
xenDebian:14 |
before 4.1.1-1 | 4.1.1-1 |
xenDebian:6.0 From an advisory covering 4 CVEs |
before 4.0.1-4, plus listed versions 4.0.1-2 |
4.0.1-4 |
xenRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:3.0.3-120.el5_6.2 | 0:3.0.3-120.el5_6.2 |
xen-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:3.0.3-120.el5_6.2 | 0:3.0.3-120.el5_6.2 |
xen-libsRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:3.0.3-120.el5_6.2 | 0:3.0.3-120.el5_6.2 |
xenRed Hat:rhel_virtualization:5::server From an advisory covering 2 CVEs |
before 0:3.0.3-120.el5_6.2 | 0:3.0.3-120.el5_6.2 |
xen-debuginfoRed Hat:rhel_virtualization:5::server From an advisory covering 2 CVEs |
before 0:3.0.3-120.el5_6.2 | 0:3.0.3-120.el5_6.2 |
xen-develRed Hat:rhel_virtualization:5::server From an advisory covering 2 CVEs |
before 0:3.0.3-120.el5_6.2 | 0:3.0.3-120.el5_6.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-1583 is a medium vulnerability (CVSS 6.9) in Citrix Xen, published August 12, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.70%, the 53rd percentile. Fixed in xen 4.1.1-1.
References
lists.xensource.com/archives/html/xen-devel/2011-05/msg00483.html
rhn.redhat.com/errata/RHSA-2011-0496.html
nvd.nist.gov/vuln/detail/CVE-2011-1583
github.com/advisories/GHSA-4qc2-w83m-rm23
security-tracker.debian.org/tracker/CVE-2011-1583
Show 9 moreShow less
access.redhat.com/errata/RHSA-2011:0496
bugzilla.redhat.com/show_bug.cgi?id=696927
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0496.json
cve.org/CVERecord?id=CVE-2011-1583