Candidate: CVE-2018-7541 PublicDate: 2018-02-27 19:29:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7541 https://xenbits.xen.org/xsa/advisory-255.html Description: An issue was discovered in Xen through 4.10.x allowing guest OS users to cause a denial of service (hypervisor crash) or gain privileges by triggering a grant-table transition from v2 to v1. Ubuntu-Description: Notes: mdeslaur> hypervisor packages are in universe. For mdeslaur> issues in the hypervisor, add appropriate mdeslaur> tags to each section, ex: mdeslaur> Tags_xen: universe-binary Bugs: Priority: medium Discovered-by: Assigned-to: CVSS: nvd: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H [8.8 HIGH] Patches_xen: Tags_xen: universe-binary upstream_xen: released (4.8.3+comet2+shim4.10.0+comet3-1+deb9u5, 4.10.1-r2) precise/esm_xen: DNE trusty_xen: ignored (reached end-of-life) trusty/esm_xen: DNE (trusty was needs-triage) xenial_xen: ignored (end of standard support, was needed) esm-infra/xenial_xen: needed artful_xen: ignored (reached end-of-life) bionic_xen: needed cosmic_xen: ignored (reached end-of-life) disco_xen: ignored (reached end-of-life) eoan_xen: ignored (reached end-of-life) focal_xen: not-affected (4.11.3+24-g14b62ab3e5-1ubuntu2) groovy_xen: not-affected (4.11.3+24-g14b62ab3e5-1ubuntu2) hirsute_xen: not-affected (4.11.3+24-g14b62ab3e5-1ubuntu2) impish_xen: not-affected (4.11.3+24-g14b62ab3e5-1ubuntu2) jammy_xen: not-affected (4.11.3+24-g14b62ab3e5-1ubuntu2) devel_xen: not-affected (4.11.3+24-g14b62ab3e5-1ubuntu2)