Every CVESearch/Get API key

CVE-2011-1936

Xen, when using x86 Intel processors and the VMX virtualization extension is enabled, does not...

4.6 Medium

CVE-2011-1936 is a medium vulnerability (CVSS 4.6) in Xen, published January 7, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.47%, the 41st percentile. No source names a fixed version.

What does this mean?
Severity
4.6 MediumCVSS 2.0, NVD
Exploit chance
0.47%EPSS, 41st percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
No fix listedNo source names one

Description

Xen, when using x86 Intel processors and the VMX virtualization extension is enabled, does not properly handle cpuid instruction emulation when exiting the VM, which allows local guest users to cause a denial of service (guest crash) via unspecified vectors.

Exploit likelihood

0.47%Down 0.4 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
kernel
Red Hat:enterprise_linux:5::server
From an advisory covering 15 CVEs
before 0:2.6.18-238.19.1.el5
0:2.6.18-238.19.1.el5
kernel-PAE
Red Hat:enterprise_linux:5::server
From an advisory covering 15 CVEs
before 0:2.6.18-238.19.1.el5
0:2.6.18-238.19.1.el5
kernel-PAE-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 15 CVEs
before 0:2.6.18-238.19.1.el5
0:2.6.18-238.19.1.el5
kernel-PAE-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 15 CVEs
before 0:2.6.18-238.19.1.el5
0:2.6.18-238.19.1.el5
kernel-debug
Red Hat:enterprise_linux:5::server
From an advisory covering 15 CVEs
before 0:2.6.18-238.19.1.el5
0:2.6.18-238.19.1.el5
kernel-debug-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 15 CVEs
before 0:2.6.18-238.19.1.el5
0:2.6.18-238.19.1.el5
kernel-debug-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 15 CVEs
before 0:2.6.18-238.19.1.el5
0:2.6.18-238.19.1.el5
kernel-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 15 CVEs
before 0:2.6.18-238.19.1.el5
0:2.6.18-238.19.1.el5
kernel-debuginfo-common
Red Hat:enterprise_linux:5::server
From an advisory covering 15 CVEs
before 0:2.6.18-238.19.1.el5
0:2.6.18-238.19.1.el5
kernel-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 15 CVEs
before 0:2.6.18-238.19.1.el5
0:2.6.18-238.19.1.el5
Show 7 moreShow less
Affected packages
PackageAffectedFixed
kernel-doc
Red Hat:enterprise_linux:5::server
From an advisory covering 15 CVEs
before 0:2.6.18-238.19.1.el5
0:2.6.18-238.19.1.el5
kernel-kdump
Red Hat:enterprise_linux:5::server
From an advisory covering 15 CVEs
before 0:2.6.18-238.19.1.el5
0:2.6.18-238.19.1.el5
kernel-kdump-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 15 CVEs
before 0:2.6.18-238.19.1.el5
0:2.6.18-238.19.1.el5
kernel-kdump-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 15 CVEs
before 0:2.6.18-238.19.1.el5
0:2.6.18-238.19.1.el5
kernel-xen
Red Hat:enterprise_linux:5::server
From an advisory covering 15 CVEs
before 0:2.6.18-238.19.1.el5
0:2.6.18-238.19.1.el5
kernel-xen-debuginfo
Red Hat:enterprise_linux:5::server
From an advisory covering 15 CVEs
before 0:2.6.18-238.19.1.el5
0:2.6.18-238.19.1.el5
kernel-xen-devel
Red Hat:enterprise_linux:5::server
From an advisory covering 15 CVEs
before 0:2.6.18-238.19.1.el5
0:2.6.18-238.19.1.el5

What each source reports

NVD Score used4.6

Xen, when using x86 Intel processors and the VMX virtualization extension is enabled, does not properly handle cpuid instruction emulation when exiting the VM, which allows local guest users to cause a denial of service (guest crash) via unspecified vectors.

Record
CVE-2011-1936
CVSS 2.0
4.6 MediumAV:A/AC:H/Au:N/C:N/I:N/A:C
Updated
2026-11-02
CVE ListNo score

Xen, when using x86 Intel processors and the VMX virtualization extension is enabled, does not properly handle cpuid instruction emulation when exiting the VM, which allows local guest users to cause a denial of service (guest crash) via unspecified vectors.

Record
CVE-2011-1936
Updated
2026-11-02
EUVDEUVD-2011-1934No score

Xen, when using x86 Intel processors and the VMX virtualization extension is enabled, does not properly handle cpuid instruction emulation when exiting the VM, which allows local guest users to cause a denial of service (guest crash) via unspecified vectors.

Record
EUVD-2011-1934
Updated
2026-11-03
GitHub AdvisoriesGHSA-36h3-x748-qfw8No score

Xen, when using x86 Intel processors and the VMX virtualization extension is enabled, does not...

Xen, when using x86 Intel processors and the VMX virtualization extension is enabled, does not properly handle cpuid instruction emulation when exiting the VM, which allows local guest users to cause a denial of service (guest crash) via unspecified vectors.

Record
GHSA-36h3-x748-qfw8
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 62 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open