CVE-2008-1952

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-06-23 · updated 2026-06-16
Weakness: CWE-119

Description

The backend for XenSource Xen Para Virtualized Frame Buffer (PVFB) in Xen ioemu does not properly restrict the frame buffer size, which allows attackers to cause a denial of service (crash) by mapping an arbitrary amount of guest memory.

Affected products

Xensource Xen Para Virtualized Frame Buffer: all versions

References

http://lists.xensource.com/archives/html/xen-devel/2008-05/msg00421.html
http://secunia.com/advisories/32088
http://www.openwall.com/lists/oss-security/2008/05/21/9
http://www.securityfocus.com/bid/30646
http://www.securitytracker.com/id?1020957
http://xenbits.xensource.com/xen-unstable.hg?rev/9044705960cb30cec385bdca7305bcf7db096721
https://exchange.xforce.ibmcloud.com/vulnerabilities/43362
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11189
https://rhn.redhat.com/errata/RHSA-2008-0892.html
http://lists.xensource.com/archives/html/xen-devel/2008-05/msg00421.html
http://secunia.com/advisories/32088
http://www.openwall.com/lists/oss-security/2008/05/21/9

Get alerted when CVE-2008-1952 or the next vulnerability affects your stack