medium5.6
CVE-2018-10472
An issue was discovered in Xen through 4.10.x allowing x86 HVM guest OS users (in certain configurations) to read arbitrary dom0 files via QMP live insertion o…
Impact
An issue was discovered in Xen through 4.10.x allowing x86 HVM guest OS users (in certain configurations) to read arbitrary dom0 files via QMP live insertion of a CDROM, in conjunction with specifying the target file as the backing file of a snapshot.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Xen | Xen | through 4.10.1 |
| Debian | Debian Linux | Version 9.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/104002
- https://lists.debian.org/debian-lts-announce/2018/10/msg00021.html
- https://security.gentoo.org/glsa/201810-06
- https://www.debian.org/security/2018/dsa-4201
- https://xenbits.xen.org/xsa/advisory-258.html
- http://www.securityfocus.com/bid/104002
- https://lists.debian.org/debian-lts-announce/2018/10/msg00021.html
- https://security.gentoo.org/glsa/201810-06
- https://www.debian.org/security/2018/dsa-4201
- https://xenbits.xen.org/xsa/advisory-258.html