CVE-2008-1952
The backend for XenSource Xen Para Virtualized Frame Buffer (PVFB) in Xen ioemu does not properly...
CVE-2008-1952 is a low vulnerability (CVSS 2.1) in Xensource Xen Para Virtualized Frame Buffer, published June 23, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 32nd percentile. No source names a fixed version.
- Severity
- 2.1 LowCVSS 2.0, NVD
- Exploit chance
- 0.38%EPSS, 32nd percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
The backend for XenSource Xen Para Virtualized Frame Buffer (PVFB) in Xen ioemu does not properly restrict the frame buffer size, which allows attackers to cause a denial of service (crash) by mapping an arbitrary amount of guest memory.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
xenRed Hat:rhel_virtualization:5::client From an advisory covering 2 CVEs | before 0:3.0.3-64.el5_2.3 | 0:3.0.3-64.el5_2.3 |
xen-debuginfoRed Hat:rhel_virtualization:5::client From an advisory covering 2 CVEs | before 0:3.0.3-64.el5_2.3 | 0:3.0.3-64.el5_2.3 |
xen-develRed Hat:rhel_virtualization:5::client From an advisory covering 2 CVEs | before 0:3.0.3-64.el5_2.3 | 0:3.0.3-64.el5_2.3 |
xenRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs | before 0:3.0.3-64.el5_2.3 | 0:3.0.3-64.el5_2.3 |
xen-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs | before 0:3.0.3-64.el5_2.3 | 0:3.0.3-64.el5_2.3 |
xen-libsRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs | before 0:3.0.3-64.el5_2.3 | 0:3.0.3-64.el5_2.3 |
xenRed Hat:rhel_virtualization:5::server From an advisory covering 2 CVEs | before 0:3.0.3-64.el5_2.3 | 0:3.0.3-64.el5_2.3 |
xen-debuginfoRed Hat:rhel_virtualization:5::server From an advisory covering 2 CVEs | before 0:3.0.3-64.el5_2.3 | 0:3.0.3-64.el5_2.3 |
xen-develRed Hat:rhel_virtualization:5::server From an advisory covering 2 CVEs | before 0:3.0.3-64.el5_2.3 | 0:3.0.3-64.el5_2.3 |
xenRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs | before 0:3.0.3-64.el5_2.3 | 0:3.0.3-64.el5_2.3 |
xen-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs | before 0:3.0.3-64.el5_2.3 | 0:3.0.3-64.el5_2.3 |
xen-libsRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs | before 0:3.0.3-64.el5_2.3 | 0:3.0.3-64.el5_2.3 |
What each source reports
NVD Score used
The backend for XenSource Xen Para Virtualized Frame Buffer (PVFB) in Xen ioemu does not properly restrict the frame buffer size, which allows attackers to cause a denial of service (crash) by mapping an arbitrary amount of guest memory.
- Record
CVE-2008-1952- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE ListNo score
The backend for XenSource Xen Para Virtualized Frame Buffer (PVFB) in Xen ioemu does not properly restrict the frame buffer size, which allows attackers to cause a denial of service (crash) by mapping an arbitrary amount of guest memory.
- Record
CVE-2008-1952- Updated
- 2026-11-02
EUVDEUVD-2008-1950No score
The backend for XenSource Xen Para Virtualized Frame Buffer (PVFB) in Xen ioemu does not properly restrict the frame buffer size, which allows attackers to cause a denial of service (crash) by mapping an arbitrary amount of guest memory.
- Record
EUVD-2008-1950- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9fj9-7hv4-wf6gNo score
The backend for XenSource Xen Para Virtualized Frame Buffer (PVFB) in Xen ioemu does not properly...
The backend for XenSource Xen Para Virtualized Frame Buffer (PVFB) in Xen ioemu does not properly restrict the frame buffer size, which allows attackers to cause a denial of service (crash) by mapping an arbitrary amount of guest memory.
- Record
GHSA-9fj9-7hv4-wf6g- Weakness
- CWE-119
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
secunia.com/advisories/32088
openwall.com/lists/oss-security/2008/05/21/9
xenbits.xensource.com/xen-unstable.hg?rev/9044705960cb30cec385bdca7305bcf7db096721
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11189
securitytracker.com/id?1020957
lists.xensource.com/archives/html/xen-devel/2008-05/msg00421.html
Show 16 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/43362
rhn.redhat.com/errata/RHSA-2008-0892.html
securityfocus.com/bid/30646
nvd.nist.gov/vuln/detail/CVE-2008-1952
github.com/advisories/GHSA-9fj9-7hv4-wf6g
access.redhat.com/errata/RHSA-2008:0892
bugzilla.redhat.com/show_bug.cgi?id=445844
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0892.json
cve.org/CVERecord?id=CVE-2008-1945