CVE-2018-5244
In Xen 4.10, new infrastructure was introduced as part of an overhaul to how MSR emulation...
In Xen 4.10, new infrastructure was introduced as part of an overhaul to how MSR emulation happens for guests. Unfortunately, one tracking structure isn't freed when a vcpu is destroyed. This allows guest OS administrators to cause a denial of service (host OS memory consumption) by rebooting many times.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
6.5
In Xen 4.10, new infrastructure was introduced as part of an overhaul to how MSR emulation happens for guests. Unfortunately, one tracking structure isn't freed when a vcpu is destroyed. This allows guest OS administrators to cause a denial of service (host OS memory consumption) by rebooting many times.
- Record
CVE-2018-5244- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H - CVSS 2.0
- 4.9 Medium
AV:L/AC:L/Au:N/C:N/I:N/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
In Xen 4.10, new infrastructure was introduced as part of an overhaul to how MSR emulation happens for guests. Unfortunately, one tracking structure isn't freed when a vcpu is destroyed. This allows guest OS administrators to cause a denial of service (host OS memory consumption) by rebooting many times.
- Record
CVE-2018-5244- Updated
- 2026-11-02
EUVDEUVD-2018-17026 No score
In Xen 4.10, new infrastructure was introduced as part of an overhaul to how MSR emulation happens for guests. Unfortunately, one tracking structure isn't freed when a vcpu is destroyed. This allows guest OS administrators to cause a denial of service (host OS memory consumption) by rebooting many times.
- Record
EUVD-2018-17026- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3r9m-2j47-xq4r
6.5
In Xen 4.10, new infrastructure was introduced as part of an overhaul to how MSR emulation...
In Xen 4.10, new infrastructure was introduced as part of an overhaul to how MSR emulation happens for guests. Unfortunately, one tracking structure isn't freed when a vcpu is destroyed. This allows guest OS administrators to cause a denial of service (host OS memory consumption) by rebooting many times.
- Record
GHSA-3r9m-2j47-xq4r- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H - Weakness
- CWE-119
- Updated
- 2026-11-02
OSVALPINE-CVE-2018-5244
6.5
In Xen 4.10, new infrastructure was introduced as part of an overhaul to how MSR emulation happens for guests. Unfortunately, one tracking structure isn't freed when a vcpu is destroyed. This allows guest OS administrators to cause a denial of service (host OS memory consumption) by rebooting many times.
- Record
ALPINE-CVE-2018-5244- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H - Updated
- 2026-11-02
OSV
6.5
In Xen 4.10, new infrastructure was introduced as part of an overhaul to how MSR emulation happens for guests. Unfortunately, one tracking structure isn't freed when a vcpu is destroyed. This allows guest OS administrators to cause a denial of service (host OS memory consumption) by rebooting many times.
- Record
CVE-2018-5244- CVSS 3.0
- 6.5 Medium
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H - Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11520-1 No score
xen-4.15.1_01-1.2 on GA media
These are all security issues fixed in the xen-4.15.1_01-1.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11520-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
xenAlpine:v3.15 |
4.10.0 up to 4.10.0-r1 | 4.10.0-r1 |
xenAlpine:v3.16 |
4.10.0 up to 4.10.0-r1 | 4.10.0-r1 |
xenAlpine:v3.17 |
4.10.0 up to 4.10.0-r1 | 4.10.0-r1 |
xenAlpine:v3.18 |
4.10.0 up to 4.10.0-r1 | 4.10.0-r1 |
xenAlpine:v3.19 |
4.10.0 up to 4.10.0-r1 | 4.10.0-r1 |
xenAlpine:v3.20 |
4.10.0 up to 4.10.0-r1 | 4.10.0-r1 |
xenAlpine:v3.21 |
4.10.0 up to 4.10.0-r1 | 4.10.0-r1 |
xenAlpine:v3.22 |
4.10.0 up to 4.10.0-r1 | 4.10.0-r1 |
xenAlpine:v3.23 |
4.10.0 up to 4.10.0-r1 | 4.10.0-r1 |
xenAlpine:v3.24 |
4.10.0 up to 4.10.0-r1 | 4.10.0-r1 |
xenopenSUSE:Tumbleweed From an advisory covering 93 CVEs |
before 4.15.1_01-1.2 | 4.15.1_01-1.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2018-5244 is a medium vulnerability (CVSS 6.5) in Xen, published January 5, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.37%, the 31st percentile. Fixed in xen 4.10.0-r1.
References
security.gentoo.org/glsa/201810-06
securityfocus.com/bid/102433
securitytracker.com/id/1040774
xenbits.xen.org/xsa/advisory-253.html
nvd.nist.gov/vuln/detail/CVE-2018-5244
github.com/advisories/GHSA-3r9m-2j47-xq4r
Show 94 moreShow less
security.alpinelinux.org/vuln/CVE-2018-5244
suse.com/security/cve/CVE-2007-1320
suse.com/security/cve/CVE-2007-1366
suse.com/security/cve/CVE-2007-3919
suse.com/security/cve/CVE-2016-10013
suse.com/security/cve/CVE-2016-10024
suse.com/security/cve/CVE-2016-10025
suse.com/security/cve/CVE-2016-7777
suse.com/security/cve/CVE-2016-7908
suse.com/security/cve/CVE-2016-7909
suse.com/security/cve/CVE-2016-8667
suse.com/security/cve/CVE-2016-8669
suse.com/security/cve/CVE-2016-8910
suse.com/security/cve/CVE-2016-9377
suse.com/security/cve/CVE-2016-9379
suse.com/security/cve/CVE-2016-9381
suse.com/security/cve/CVE-2016-9382
suse.com/security/cve/CVE-2016-9383
suse.com/security/cve/CVE-2016-9384
suse.com/security/cve/CVE-2016-9385
suse.com/security/cve/CVE-2016-9386
suse.com/security/cve/CVE-2016-9637
suse.com/security/cve/CVE-2016-9921
suse.com/security/cve/CVE-2016-9932
suse.com/security/cve/CVE-2017-12135
suse.com/security/cve/CVE-2017-12136
suse.com/security/cve/CVE-2017-12137
suse.com/security/cve/CVE-2017-2615
suse.com/security/cve/CVE-2017-2620
suse.com/security/cve/CVE-2017-5753
suse.com/security/cve/CVE-2017-6505
suse.com/security/cve/CVE-2017-8309
suse.com/security/cve/CVE-2017-9330
suse.com/security/cve/CVE-2018-10471
suse.com/security/cve/CVE-2018-10472
suse.com/security/cve/CVE-2018-10981
suse.com/security/cve/CVE-2018-10982
suse.com/security/cve/CVE-2018-12126
suse.com/security/cve/CVE-2018-12891
suse.com/security/cve/CVE-2018-12892
suse.com/security/cve/CVE-2018-12893
suse.com/security/cve/CVE-2018-15468
suse.com/security/cve/CVE-2018-15469
suse.com/security/cve/CVE-2018-15470
suse.com/security/cve/CVE-2018-18883
suse.com/security/cve/CVE-2018-19961
suse.com/security/cve/CVE-2018-19963
suse.com/security/cve/CVE-2018-19964
suse.com/security/cve/CVE-2018-19965
suse.com/security/cve/CVE-2018-19966
suse.com/security/cve/CVE-2018-19967
suse.com/security/cve/CVE-2018-3639
suse.com/security/cve/CVE-2018-3646
suse.com/security/cve/CVE-2018-3665
suse.com/security/cve/CVE-2018-5244
suse.com/security/cve/CVE-2018-7540
suse.com/security/cve/CVE-2018-7541
suse.com/security/cve/CVE-2018-7542
suse.com/security/cve/CVE-2018-8897
suse.com/security/cve/CVE-2019-17349
suse.com/security/cve/CVE-2020-0543
suse.com/security/cve/CVE-2020-11739
suse.com/security/cve/CVE-2020-11740
suse.com/security/cve/CVE-2020-11742
suse.com/security/cve/CVE-2020-11743
suse.com/security/cve/CVE-2020-15563
suse.com/security/cve/CVE-2020-15565
suse.com/security/cve/CVE-2020-15566
suse.com/security/cve/CVE-2020-15567
suse.com/security/cve/CVE-2020-25595
suse.com/security/cve/CVE-2020-25596
suse.com/security/cve/CVE-2020-25597
suse.com/security/cve/CVE-2020-25598
suse.com/security/cve/CVE-2020-25599
suse.com/security/cve/CVE-2020-25600
suse.com/security/cve/CVE-2020-25601
suse.com/security/cve/CVE-2020-25602
suse.com/security/cve/CVE-2020-25603
suse.com/security/cve/CVE-2020-25604
suse.com/security/cve/CVE-2020-27670
suse.com/security/cve/CVE-2020-27671
suse.com/security/cve/CVE-2020-27672
suse.com/security/cve/CVE-2020-27674
suse.com/security/cve/CVE-2020-28368
suse.com/security/cve/CVE-2020-29040
suse.com/security/cve/CVE-2020-29480
suse.com/security/cve/CVE-2020-29481
suse.com/security/cve/CVE-2020-29483
suse.com/security/cve/CVE-2020-29484
suse.com/security/cve/CVE-2020-29566
suse.com/security/cve/CVE-2020-29567
suse.com/security/cve/CVE-2020-29570
suse.com/security/cve/CVE-2020-29571
suse.com/security/cve/CVE-2021-28687