Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Xen 4.1 before 4.1.1 and 4.0 before 4.0.2, when using PCI passthrough on Intel VT-d chipsets that do not have interrupt remapping, allows guest OS users to gain host OS privileges by "using DMA to generate MSI interrupts by writing to the interrupt injection registers."
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Citrix Xen权限许可和访问控制漏洞
Vulnerability Description
Xen是英国剑桥大学开发的一款开源的虚拟机监视器产品。该产品能够使不同和不兼容的操作系统运行在同一台计算机上，并支持在运行时进行迁移，保证正常运行并且避免宕机。 Xen 4.1.1之前的4.1版本和4.0.2之前的4.0版本在使用PCI转移到不能中断重映射的Intel VT-d芯片组时存在权限许可和访问控制漏洞。本地用户可通过“使用DMA写入中断注入寄存器来生成MSI中断”，获得主机操作系统权限。
CVSS Information
N/A
Vulnerability Type
N/A