CVE-2019-17351

Description

An issue was discovered in drivers/xen/balloon.c in the Linux kernel before 5.2.3, as used in Xen through 4.12.x, allowing guest OS users to cause a denial of service because of unrestricted resource consumption during the mapping of guest memory, aka CID-6ef36ab967c7.

Risk Information

Base Score
6.5
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.086

Associated Vulnerability

VulnerabilityOS Platform
Linux kernel (USN-4286-1) linux-image-aws_4.4.0.1102.106_amd64.debLinux
Linux kernel (USN-4286-1) linux-image-kvm_4.4.0.1066.66_amd64.debLinux
Linux kernel (USN-4286-1) linux-image-generic_4.4.0.174.182_i386.debLinux
Linux kernel (USN-4286-1) linux-image-generic_4.4.0.174.182_amd64.debLinux
Linux kernel (USN-4286-1) linux-image-virtual_4.4.0.174.182_i386.debLinux
Linux kernel (USN-4286-1) linux-image-virtual_4.4.0.174.182_amd64.debLinux
Linux kernel (USN-4286-1) linux-image-lowlatency_4.4.0.174.182_i386.debLinux
Linux kernel (USN-4286-1) linux-image-lowlatency_4.4.0.174.182_amd64.debLinux
Linux kernel (USN-4286-1) linux-image-4.4.0-1066-kvm_4.4.0-1066.73_amd64.debLinux
Linux kernel (USN-4286-1) linux-image-4.4.0-1102-aws_4.4.0-1102.113_amd64.debLinux
Linux kernel (USN-4286-1) linux-image-4.4.0-174-generic_4.4.0-174.204_i386.debLinux
Linux kernel (USN-4286-1) linux-image-4.4.0-174-generic_4.4.0-174.204_amd64.debLinux
Linux kernel (USN-4286-1) linux-image-4.4.0-174-lowlatency_4.4.0-174.204_i386.debLinux
Linux kernel (USN-4286-1) linux-image-4.4.0-174-lowlatency_4.4.0-174.204_amd64.debLinux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234