>> Redhat Security Update Fixes Xen Security Bypass and DoS Issues
Title : Redhat Security Update Fixes Xen Security Bypass and DoS Issues VUPEN ID : VUPEN/ADV-2008-2717 CVE ID : CVE-2008-1945 - CVE-2008-1952
Rated as : Moderate Risk
Remotely Exploitable : Yes Locally Exploitable : Yes Release Date : 2008-10-03
Technical Description
Two vulnerabilities have been identified in various Redhat products, which could be exploited by malicious users to disclose sensitive information, cause a denial of service or potentially gain elevated privileges.
The first issue is caused by an error in the hypervisor para-virtualized framebuffer (PVFB) backend of Xen that fails to properly validate the frontend framebuffer description, which could allow a privileged user in the unprivileged domain (DomU) to cause a denial of service or potentially gain domain privileges (Dom0).
The second vulnerability is caused by an error in the QEMU block format auto-detection when running fully-virtualized guests and using Qemu images written on removable media, which could allow privileged users on fully-virtualized guests (DomU) with a raw-formatted disk image, to read arbitrary files in their hypervisor's host (Dom0).
