CVE-2018-19965

Description

An issue was discovered in Xen through 4.11.x allowing 64-bit PV guest OS users to cause a denial of service (host OS crash) because #GP[0] can occur after a non-canonical address is passed to the TLB flushing code. NOTE: this issue exists because of an incorrect CVE-2017-5754 (aka Meltdown) mitigation.

Risk Information

Base Score

5.6

MODERATE

Vector

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H

EPSS Score

Exploitation Probability

0.18

Associated Vulnerability

Vulnerability	OS Platform
Multiple Vulnerabilities are affected in Citrix XenCenter 7.0	Windows
Multiple Vulnerabilities are affected in Citrix XenCenter 7.5	Windows
Vulnerabilities CVE-2018-19961,CVE-2018-19962,CVE-2018-19965 are affected in Citrix XenCenter 7.6	Windows
CVE-2018-19965	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234