{"id":"CVE-2018-10471","aliases":["ALPINE-CVE-2018-10471","DEBIAN-CVE-2018-10471","DLA-1549-1","DSA-4201-1","EUVD-2018-2543","GHSA-v5vc-f4vf-8rvg","SUSE-SU-2018:1177-1","SUSE-SU-2018:1181-1","SUSE-SU-2018:1184-1","SUSE-SU-2018:1202-1","SUSE-SU-2018:1203-1","SUSE-SU-2018:1216-1","SUSE-SU-2018:3230-1","UBUNTU-CVE-2018-10471","openSUSE-SU-2024:11520-1"],"status":"published","title":"An issue was discovered in Xen through 4.10.x allowing x86 PV guest OS users to cause a denial of...","description":"An issue was discovered in Xen through 4.10.x allowing x86 PV guest OS users to cause a denial of service (out-of-bounds zero write and hypervisor crash) via unexpected INT 80 processing, because of an incorrect fix for CVE-2017-5754.","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00421,"percentile":0.36733,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2018-04-27T15:00:00Z","modified":"2026-10-23T18:04:46Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"xen","fixed_in":["4.10.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"xen","fixed_in":["4.10.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"xen","fixed_in":["4.10.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"xen","fixed_in":["4.10.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"xen","fixed_in":["4.10.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"xen","fixed_in":["4.10.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"xen","fixed_in":["4.10.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"xen","fixed_in":["4.10.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"xen","fixed_in":["4.10.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"xen","fixed_in":["4.10.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"xen","fixed_in":["4.10.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"xen","fixed_in":["4.10.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"xen","fixed_in":["4.10.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"xen","fixed_in":["4.10.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"xen","fixed_in":["4.10.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.4","package":"xen","fixed_in":["4.6.6-r5"],"sources":["osv"]},{"ecosystem":"Alpine:v3.5","package":"xen","fixed_in":["4.7.3-r9"],"sources":["osv"]},{"ecosystem":"Alpine:v3.6","package":"xen","fixed_in":["4.8.3-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"xen","fixed_in":["4.9.2-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"xen","fixed_in":["4.10.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"xen","fixed_in":["4.10.1-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"xen","fixed_in":["4.8.3+xsa262+shim4.10.0+comet3-1+deb9u6"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"xen","fixed_in":["4.8.3+xsa262+shim4.10.0+comet3-1+deb9u6"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"xen","fixed_in":["4.8.3+xsa262+shim4.10.0+comet3-1+deb9u6"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.4","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6.6-r5"}]}]},{"source":"osv","ecosystem":"Alpine:v3.5","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.3-r9"}]}]},{"source":"osv","ecosystem":"Alpine:v3.6","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.3-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.1-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.3+xsa262+shim4.10.0+comet3-1+deb9u6"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.3+xsa262+shim4.10.0+comet3-1+deb9u6"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.3+xsa262+shim4.10.0+comet3-1+deb9u6"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.4lts2-0+deb8u1"}]}],"versions":["4.4.1-9","4.4.1-9+deb8u1","4.4.1-9+deb8u10","4.4.1-9+deb8u2","4.4.1-9+deb8u3","4.4.1-9+deb8u4","4.4.1-9+deb8u5","4.4.1-9+deb8u6","4.4.1-9+deb8u7","4.4.1-9+deb8u8","4.4.1-9+deb8u9","4.4.4lts1-0+deb8u1"],"bundled":14},{"source":"osv","ecosystem":"Debian:9","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.3+xsa262+shim4.10.0+comet3-1+deb9u6"}]}],"versions":["4.8.1-1+deb9u1","4.8.1-1+deb9u2","4.8.1-1+deb9u3","4.8.2+xsa245-0+deb9u1","4.8.3+comet2+shim4.10.0+comet3-1+deb9u4","4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1","4.8.3+comet2+shim4.10.0+comet3-1+deb9u5"],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.4_30-22.65.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.4_30-61.26.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.4_30-61.26.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.4_30-61.26.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2_04-3.29.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2_04-3.29.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2_04-3.29.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.2_04-3.29.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 6","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.5_24-22.46.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.5_24-22.46.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.5_24-22.46.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.5_21-45.22.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.5_21-45.22.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.5_02-43.30.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.5_02-43.30.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.5_02-43.30.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.5_02-43.30.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.5_02-43.30.1"}]}],"bundled":4},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.5.1-0ubuntu1","4.5.1-0ubuntu2","4.6.0-1ubuntu1","4.6.0-1ubuntu2","4.6.0-1ubuntu4","4.6.0-1ubuntu4.1","4.6.0-1ubuntu4.2","4.6.0-1ubuntu4.3","4.6.5-0ubuntu1","4.6.5-0ubuntu1.1","4.6.5-0ubuntu1.2","4.6.5-0ubuntu1.4"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.1_01-1.2"}]}],"bundled":93}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"xen","product":"xen"}],"references":[{"url":"http://www.securityfocus.com/bid/104003","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://security.gentoo.org/glsa/201810-06","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"https://xenbits.xen.org/xsa/advisory-259.html","tags":["x_refsource_CONFIRM","x_transferred","Mitigation","Vendor Advisory","advisory","report"]},{"url":"https://www.debian.org/security/2018/dsa-4201","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/10/msg00009.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10471"},{"url":"https://github.com/advisories/GHSA-v5vc-f4vf-8rvg"},{"url":"https://security.alpinelinux.org/vuln/CVE-2018-10471","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-10471","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181177-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1027519","tags":["report"]},{"url":"https://bugzilla.suse.com/1057493","tags":["report"]},{"url":"https://bugzilla.suse.com/1072834","tags":["report"]},{"url":"https://bugzilla.suse.com/1083292","tags":["report"]},{"url":"https://bugzilla.suse.com/1086107","tags":["report"]},{"url":"https://bugzilla.suse.com/1089152","tags":["report"]},{"url":"https://bugzilla.suse.com/1089635","tags":["report"]},{"url":"https://bugzilla.suse.com/1090820","tags":["report"]},{"url":"https://bugzilla.suse.com/1090822","tags":["report"]},{"url":"https://bugzilla.suse.com/1090823","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10471","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10472","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7550","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8897","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181181-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1035442","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181184-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1080634","tags":["report"]},{"url":"https://bugzilla.suse.com/1080635","tags":["report"]},{"url":"https://bugzilla.suse.com/1080662","tags":["report"]},{"url":"https://bugzilla.suse.com/1087251","tags":["report"]},{"url":"https://bugzilla.suse.com/1087252","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7540","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7541","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7542","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181202-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181203-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181216-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1086039","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20183230-1/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5754","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2018-10471","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10471","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2007-1320","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-1366","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-3919","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10013","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10024","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10025","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7777","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7908","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7909","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8667","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8669","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-8910","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9377","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9379","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9381","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9382","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9383","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9384","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9385","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9637","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9921","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-9932","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12135","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12137","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2615","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-2620","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5753","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8309","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9330","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10981","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10982","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12126","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12891","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12892","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12893","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-15468","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-15469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-15470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18883","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19961","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19963","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19964","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19966","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19967","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3639","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3646","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3665","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5244","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17349","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-0543","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11739","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11742","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11743","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15563","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15565","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15566","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15567","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25595","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25596","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25597","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25598","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25599","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25600","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25601","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25602","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25603","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25604","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27670","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27671","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27672","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-27674","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-28368","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-29040","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-29480","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-29481","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-29483","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-29484","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-29566","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-29567","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-29570","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-29571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-28687","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-10471","description":"An issue was discovered in Xen through 4.10.x allowing x86 PV guest OS users to cause a denial of service (out-of-bounds zero write and hypervisor crash) via unexpected INT 80 processing, because of an incorrect fix for CVE-2017-5754.","status":"published","published":"2018-04-27T15:00:00Z","modified":"2024-08-05T07:39:07.337Z","updated_at":"2026-11-02T14:35:01.952568Z"}],"euvd":[{"id":"EUVD-2018-2543","description":"An issue was discovered in Xen through 4.10.x allowing x86 PV guest OS users to cause a denial of service (out-of-bounds zero write and hypervisor crash) via unexpected INT 80 processing, because of an incorrect fix for CVE-2017-5754.","status":"published","published":"2018-04-27T15:00:00Z","modified":"2024-08-05T07:39:07Z","updated_at":"2026-11-03T02:39:58.53784Z"}],"ghsa":[{"id":"GHSA-v5vc-f4vf-8rvg","title":"An issue was discovered in Xen through 4.10.x allowing x86 PV guest OS users to cause a denial of...","description":"An issue was discovered in Xen through 4.10.x allowing x86 PV guest OS users to cause a denial of service (out-of-bounds zero write and hypervisor crash) via unexpected INT 80 processing, because of an incorrect fix for CVE-2017-5754.","status":"published","published":"2022-05-14T02:03:24Z","modified":"2023-02-02T05:05:16Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:52:03.631935Z"}],"nvd":[{"id":"CVE-2018-10471","description":"An issue was discovered in Xen through 4.10.x allowing x86 PV guest OS users to cause a denial of service (out-of-bounds zero write and hypervisor crash) via unexpected INT 80 processing, because of an incorrect fix for CVE-2017-5754.","status":"published","published":"2018-04-27T15:29:00.31Z","modified":"2026-06-17T01:34:00.53Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.9,"vector":"AV:L/AC:L/Au:N/C:N/I:N/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:04:26.098615Z"}],"osv":[{"id":"ALPINE-CVE-2018-10471","description":"An issue was discovered in Xen through 4.10.x allowing x86 PV guest OS users to cause a denial of service (out-of-bounds zero write and hypervisor crash) via unexpected INT 80 processing, because of an incorrect fix for CVE-2017-5754.","status":"published","published":"2018-04-27T15:29:00.31Z","modified":"2026-10-23T17:17:55.161159797Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:27:47.187336Z"},{"id":"CVE-2018-10471","description":"An issue was discovered in Xen through 4.10.x allowing x86 PV guest OS users to cause a denial of service (out-of-bounds zero write and hypervisor crash) via unexpected INT 80 processing, because of an incorrect fix for CVE-2017-5754.","status":"published","published":"2018-04-27T15:29:00.31Z","modified":"2026-03-15T22:17:02.607538Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:07.641418Z"},{"id":"DEBIAN-CVE-2018-10471","description":"An issue was discovered in Xen through 4.10.x allowing x86 PV guest OS users to cause a denial of service (out-of-bounds zero write and hypervisor crash) via unexpected INT 80 processing, because of an incorrect fix for CVE-2017-5754.","status":"published","published":"2018-04-27T15:29:00.31Z","modified":"2026-10-23T18:04:46.485615151Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:29.988046Z"},{"id":"UBUNTU-CVE-2018-10471","description":"An issue was discovered in Xen through 4.10.x allowing x86 PV guest OS users to cause a denial of service (out-of-bounds zero write and hypervisor crash) via unexpected INT 80 processing, because of an incorrect fix for CVE-2017-5754.","status":"published","published":"2018-04-27T15:29:00Z","modified":"2026-04-22T11:41:05.663371Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:16.544091Z"},{"id":"DLA-1549-1","title":"xen - security update","status":"published","published":"2018-10-18T00:00:00Z","modified":"2026-03-09T01:22:16.03483Z","updated_at":"2026-11-02T15:46:09.777694Z"},{"id":"DSA-4201-1","title":"xen - security update","status":"published","published":"2018-05-15T00:00:00Z","modified":"2026-03-09T01:17:55.238517Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"openSUSE-SU-2024:11520-1","title":"xen-4.15.1_01-1.2 on GA media","description":"These are all security issues fixed in the xen-4.15.1_01-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:08:22.378535Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2018:1177-1","title":"Security update for xen","description":"This update for xen fixes several issues.\n\nThese security issues were fixed:\n\n- CVE-2018-8897: Prevent mishandling of debug exceptions on x86 (XSA-260, bsc#1090820)\n- Handle HPET timers in IO-APIC mode correctly to prevent malicious or buggy\n  HVM guests from causing a hypervisor crash or potentially privilege\n  escalation/information leaks (XSA-261, bsc#1090822)\n- Prevent unbounded loop, induced by qemu allowing an attacker to permanently\n  keep a physical CPU core busy (XSA-262, bsc#1090823)\n- CVE-2018-10472: x86 HVM guest OS users (in certain configurations) were able\n  to read arbitrary dom0 files via QMP live insertion of a CDROM, in conjunction\n  with specifying the target file as the backing file of a snapshot\n  (bsc#1089152).\n- CVE-2018-10471: x86 PV guest OS users were able to cause a denial of service\n  (out-of-bounds zero write and hypervisor crash) via unexpected INT 80\n  processing, because of an incorrect fix for CVE-2017-5754 (bsc#1089635).\n- CVE-2018-7550: The load_multiboot function allowed local guest OS users to\n  execute arbitrary code on the host via a mh_load_end_addr value greater than\n  mh_bss_end_addr, which triggers an out-of-bounds read or write memory access\n  (bsc#1083292).\n\nThis non-security issue was fixed:\n\n- bsc#1072834: Prevent unchecked MSR access error\n- bsc#1057493: Prevent DomU crashes\n- bsc#1086107: Fixed problems with backports for XSA-246 and XSA-247\n  ","status":"published","published":"2018-05-09T11:30:52Z","modified":"2026-02-04T04:30:09.282807Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2018:1181-1","title":"Security update for xen","description":"This update for xen fixes several issues.\n\nThese security issues were fixed:\n\n- CVE-2018-8897: Prevent mishandling of debug exceptions on x86 (XSA-260, bsc#1090820)\n- Handle HPET timers in IO-APIC mode correctly to prevent malicious or buggy\n  HVM guests from causing a hypervisor crash or potentially privilege\n  escalation/information leaks (XSA-261, bsc#1090822)\n- Prevent unbounded loop, induced by qemu allowing an attacker to permanently\n  keep a physical CPU core busy (XSA-262, bsc#1090823)\n- CVE-2018-10472: x86 HVM guest OS users (in certain configurations) were able\n  to read arbitrary dom0 files via QMP live insertion of a CDROM, in conjunction\n  with specifying the target file as the backing file of a snapshot\n  (bsc#1089152).\n- CVE-2018-10471: x86 PV guest OS users were able to cause a denial of service\n  (out-of-bounds zero write and hypervisor crash) via unexpected INT 80\n  processing, because of an incorrect fix for CVE-2017-5754 (bsc#1089635).\n- CVE-2018-7550: The load_multiboot function allowed local guest OS users to\n  execute arbitrary code on the host via a mh_load_end_addr value greater than\n  mh_bss_end_addr, which triggers an out-of-bounds read or write memory access\n  (bsc#1083292).\n\nThese non-security issues were fixed:\n\n- bsc#1072834: Prevent unchecked MSR access error\n- bsc#1035442: Increase the value of LIBXL_DESTROY_TIMEOUT from 10 to 100\n  seconds, allowing for more domUs to be shutdown in parallel\n- bsc#1057493: Prevent DomU crash\n\n  ","status":"published","published":"2018-05-09T11:31:36Z","modified":"2026-02-04T02:32:08.710451Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2018:1184-1","title":"Security update for xen","description":"This update for xen to version 4.9.2 fixes several issues.\n\nThis feature was added:\n\n- Added script, udev rule and systemd service to watch for vcpu online/offline\n  events in a HVM domU. They are triggered via 'xl vcpu-set domU N'\n\nThese security issues were fixed:\n\n- CVE-2018-8897: Prevent mishandling of debug exceptions on x86 (XSA-260, bsc#1090820)\n- Handle HPET timers in IO-APIC mode correctly to prevent malicious or buggy\n  HVM guests from causing a hypervisor crash or potentially privilege\n  escalation/information leaks (XSA-261, bsc#1090822)\n- Prevent unbounded loop, induced by qemu allowing an attacker to permanently\n  keep a physical CPU core busy (XSA-262, bsc#1090823)\n- CVE-2018-10472: x86 HVM guest OS users (in certain configurations) were able\n  to read arbitrary dom0 files via QMP live insertion of a CDROM, in conjunction\n  with specifying the target file as the backing file of a snapshot\n  (bsc#1089152).\n- CVE-2018-10471: x86 PV guest OS users were able to cause a denial of service\n  (out-of-bounds zero write and hypervisor crash) via unexpected INT 80\n  processing, because of an incorrect fix for CVE-2017-5754 (bsc#1089635).\n- CVE-2018-7540: x86 PV guest OS users were able to cause a denial of service\n  (host OS CPU hang) via non-preemptable L3/L4 pagetable freeing (bsc#1080635).\n- CVE-2018-7541: Guest OS users were able to cause a denial of service\n  (hypervisor crash) or gain privileges by triggering a grant-table transition\n  from v2 to v1 (bsc#1080662).\n- CVE-2018-7542: x86 PVH guest OS users were able to cause a denial of service\n  (NULL pointer dereference and hypervisor crash) by leveraging the mishandling\n  of configurations that lack a Local APIC (bsc#1080634).\n\nThese non-security issues were fixed:\n\n- bsc#1087252: Update built-in defaults for xenstored in stubdom, keep default\n  to run xenstored as daemon in dom0\n- bsc#1087251: Preserve xen-syms from xen-dbg.gz to allow processing vmcores\n  with crash(1) \n- bsc#1072834: Prevent unchecked MSR access error\n  ","status":"published","published":"2018-05-09T15:05:50Z","modified":"2026-02-04T04:12:36.710478Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2018:1202-1","title":"Security update for xen","description":"This update for xen fixes several issues.\n\nThese security issues were fixed:\n\n- CVE-2018-8897: Prevent mishandling of debug exceptions on x86 (XSA-260, bsc#1090820)\n- Handle HPET timers in IO-APIC mode correctly to prevent malicious or buggy\n  HVM guests from causing a hypervisor crash or potentially privilege\n  escalation/information leaks (XSA-261, bsc#1090822)\n- Prevent unbounded loop, induced by qemu allowing an attacker to permanently\n  keep a physical CPU core busy (XSA-262, bsc#1090823)\n- CVE-2018-10472: x86 HVM guest OS users (in certain configurations) were able\n  to read arbitrary dom0 files via QMP live insertion of a CDROM, in conjunction\n  with specifying the target file as the backing file of a snapshot\n  (bsc#1089152).\n- CVE-2018-10471: x86 PV guest OS users were able to cause a denial of service\n  (out-of-bounds zero write and hypervisor crash) via unexpected INT 80\n  processing, because of an incorrect fix for CVE-2017-5754 (bsc#1089635).\n- CVE-2018-7550: The load_multiboot function allowed local guest OS users to\n  execute arbitrary code on the host via a mh_load_end_addr value greater than\n  mh_bss_end_addr, which triggers an out-of-bounds read or write memory access\n  (bsc#1083292).\n  ","status":"published","published":"2018-05-10T10:43:03Z","modified":"2026-02-04T04:23:51.255159Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2018:1203-1","title":"Security update for xen","description":"This update for xen fixes several issues.\n\nThese security issues were fixed:\n\n- CVE-2018-8897: Prevent mishandling of debug exceptions on x86 (XSA-260, bsc#1090820)\n- Handle HPET timers in IO-APIC mode correctly to prevent malicious or buggy\n  HVM guests from causing a hypervisor crash or potentially privilege\n  escalation/information leaks (XSA-261, bsc#1090822)\n- Prevent unbounded loop, induced by qemu allowing an attacker to permanently\n  keep a physical CPU core busy (XSA-262, bsc#1090823)\n- CVE-2018-10472: x86 HVM guest OS users (in certain configurations) were able\n  to read arbitrary dom0 files via QMP live insertion of a CDROM, in conjunction\n  with specifying the target file as the backing file of a snapshot\n  (bsc#1089152).\n- CVE-2018-10471: x86 PV guest OS users were able to cause a denial of service\n  (out-of-bounds zero write and hypervisor crash) via unexpected INT 80\n  processing, because of an incorrect fix for CVE-2017-5754 (bsc#1089635).\n- CVE-2018-7550: The load_multiboot function allowed local guest OS users to\n  execute arbitrary code on the host via a mh_load_end_addr value greater than\n  mh_bss_end_addr, which triggers an out-of-bounds read or write memory access\n  (bsc#1083292).\n  ","status":"published","published":"2018-05-10T15:10:54Z","modified":"2026-02-04T03:47:51.690288Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2018:1216-1","title":"Security update for xen","description":"This update for xen fixes several issues.\n\nThese security issues were fixed:\n\n- CVE-2018-8897: Prevent mishandling of debug exceptions on x86 (XSA-260, bsc#1090820)\n- Handle HPET timers in IO-APIC mode correctly to prevent malicious or buggy\n  HVM guests from causing a hypervisor crash or potentially privilege\n  escalation/information leaks (XSA-261, bsc#1090822)\n- Prevent unbounded loop, induced by qemu allowing an attacker to permanently\n  keep a physical CPU core busy (XSA-262, bsc#1090823)\n- CVE-2018-10472: x86 HVM guest OS users (in certain configurations) were able\n  to read arbitrary dom0 files via QMP live insertion of a CDROM, in conjunction\n  with specifying the target file as the backing file of a snapshot\n  (bsc#1089152).\n- CVE-2018-10471: x86 PV guest OS users were able to cause a denial of service\n  (out-of-bounds zero write and hypervisor crash) via unexpected INT 80\n  processing, because of an incorrect fix for CVE-2017-5754 (bsc#1089635).\n\nThese non-security issues were fixed:\n\n- bsc#1086039: Ensure that Dom0 does represent DomU cpu flags correctly\n- bsc#1027519: Fixed shadow mode guests\n","status":"published","published":"2018-05-11T07:58:54Z","modified":"2026-02-04T04:37:29.230932Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2018:3230-1","title":"Security update for xen","description":"This update for xen fixes several issues.\n\nThese security issues were fixed:\n\n- CVE-2018-8897: Prevent mishandling of debug exceptions on x86 (XSA-260, bsc#1090820)\n- Handle HPET timers in IO-APIC mode correctly to prevent malicious or buggy\n  HVM guests from causing a hypervisor crash or potentially privilege\n  escalation/information leaks (XSA-261, bsc#1090822)\n- Prevent unbounded loop, induced by qemu allowing an attacker to permanently\n  keep a physical CPU core busy (XSA-262, bsc#1090823)\n- CVE-2018-10472: x86 HVM guest OS users (in certain configurations) were able\n  to read arbitrary dom0 files via QMP live insertion of a CDROM, in conjunction\n  with specifying the target file as the backing file of a snapshot\n  (bsc#1089152).\n- CVE-2018-10471: x86 PV guest OS users were able to cause a denial of service\n  (out-of-bounds zero write and hypervisor crash) via unexpected INT 80\n  processing, because of an incorrect fix for CVE-2017-5754 (bsc#1089635).\n\nThese non-security issues were fixed:\n\n- bsc#1086039: Ensure that Dom0 does represent DomU cpu flags correctly\n- bsc#1027519: Fixed shadow mode guests\n","status":"published","published":"2018-10-18T12:44:39Z","modified":"2025-05-02T04:06:54.274496Z","updated_at":"2026-11-02T15:53:45.378228Z"}]}}