Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
xend in Xen 3.0.3 does not properly limit the contents of the /local/domain xenstore directory tree, and does not properly restrict a guest VM's write access within this tree, which allows guest OS users to cause a denial of service and possibly have unspecified other impact by writing to (1) console/tty, (2) console/limit, or (3) image/device-model-pid. NOTE: this issue was originally reported as an issue in libvirt 0.3.3 and xenstore, but CVE is considering the core issue to be related to Xen.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Xen XenStore Domain 配置数据不安全储存漏洞
Vulnerability Description
xend in Xen没有适当的限制/local/domain xenstore目录树的容量,也没有限制来访的VM在目录树的写入权限，这使得一个客户操作系统用户通过向console/tty,console/limit, 或者image/device-model-pid进行写入导致一次拒绝服务攻击和可能其他的未明影响。
CVSS Information
N/A
Vulnerability Type
N/A