What’s Vulnerable › Vulnerabilities
CVE-2011-1583
- Severity: medium (CVSS 6.9 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.7% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2011-08-12 · updated 2026-06-16
- Weakness: CWE-189
Description
Multiple integer overflows in tools/libxc/xc_dom_bzimageloader.c in Xen 3.2, 3.3, 4.0, and 4.1 allow local users to cause a denial of service and possibly execute arbitrary code via a crafted paravirtualised guest kernel image that triggers (1) a buffer overflow during a decompression loop or (2) an out-of-bounds read in the loader involving unspecified length fields.
Affected products
- Citrix Xen: 3.2.0, 3.3.0, 4.0.0, 4.1.0
References
- http://lists.xensource.com/archives/html/xen-devel/2011-05/msg00483.html
- http://lists.xensource.com/archives/html/xen-devel/2011-05/msg00491.html
- http://rhn.redhat.com/errata/RHSA-2011-0496.html
- http://lists.xensource.com/archives/html/xen-devel/2011-05/msg00483.html
- http://lists.xensource.com/archives/html/xen-devel/2011-05/msg00491.html
- http://rhn.redhat.com/errata/RHSA-2011-0496.html
Get alerted when CVE-2011-1583 or the next vulnerability affects your stack