CVE-2011-1166

Severity: medium (CVSS 5.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-01-07 · updated 2026-06-16
Weakness: CWE-20

Description

Xen, possibly before 4.0.2, allows local 64-bit PV guests to cause a denial of service (host crash) by specifying user mode execution without user-mode pagetables.

Affected products

xen: through 4.0.1; 3.0.2, 3.0.3, 3.0.4, 3.1.3, 3.1.4, 3.2.0 (+12)

References

http://downloads.avaya.com/css/P8/documents/100145416
http://rhn.redhat.com/errata/RHSA-2011-0833.html
http://wiki.xen.org/wiki/Security_Announcements#XSA-1_Host_crash_due_to_failure_to_correctly_validate_PV_kernel_execution_state.
http://downloads.avaya.com/css/P8/documents/100145416
http://rhn.redhat.com/errata/RHSA-2011-0833.html
http://wiki.xen.org/wiki/Security_Announcements#XSA-1_Host_crash_due_to_failure_to_correctly_validate_PV_kernel_execution_state.

Get alerted when CVE-2011-1166 or the next vulnerability affects your stack