{"id":"CVE-2018-19961","state":"PUBLISHED","title":"An issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS users to gain host OS privileges because TLB flushes do not always occur after IOMMU ","description":"An issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS users to gain host OS privileges because TLB flushes do not always occur after IOMMU mapping changes.","publishedAt":"2018-12-08T04:00:00.000Z","updatedAt":"2024-08-05T11:51:17.944Z","severity":null,"assigner":"mitre","products":["n/a n/a"],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":["https://support.citrix.com/article/CTX239432","https://www.debian.org/security/2019/dsa-4369","http://www.securityfocus.com/bid/106182","https://xenbits.xen.org/xsa/advisory-275.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UXC6BME7SXJI2ZIATNXCAH7RGPI4UKTT/","http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00072.html","https://lists.debian.org/debian-lts-announce/2019/10/msg00008.html"],"weaknesses":[],"ingestedAt":"2026-10-29T19:44:34.704Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2018/19xxx/CVE-2018-19961.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2018-19961","state":"PUBLISHED","datePublished":"2018-12-08T04:00:00.000Z","dateUpdated":"2024-08-05T11:51:17.944Z","assignerShortName":"mitre","assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","dateReserved":"2018-12-07T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"An issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS users to gain host OS privileges because TLB flushes do not always occur after IOMMU mapping changes."}],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"https://support.citrix.com/article/CTX239432","tags":["x_refsource_CONFIRM"]},{"url":"https://www.debian.org/security/2019/dsa-4369","name":"DSA-4369","tags":["vendor-advisory","x_refsource_DEBIAN"]},{"url":"http://www.securityfocus.com/bid/106182","name":"106182","tags":["vdb-entry","x_refsource_BID"]},{"url":"https://xenbits.xen.org/xsa/advisory-275.html","tags":["x_refsource_MISC"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UXC6BME7SXJI2ZIATNXCAH7RGPI4UKTT/","name":"FEDORA-2019-bce6498890","tags":["vendor-advisory","x_refsource_FEDORA"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00072.html","name":"openSUSE-SU-2019:1226","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/10/msg00008.html","name":"[debian-lts-announce] 20191008 [SECURITY] [DLA 1949-1] xen security update","tags":["mailing-list","x_refsource_MLIST"]}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"mitre","dateUpdated":"2019-10-08T14:06:08.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca"},"datePublic":"2018-12-07T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2018-19961","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"An issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS users to gain host OS privileges because TLB flushes do not always occur after IOMMU mapping changes."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"https://support.citrix.com/article/CTX239432","refsource":"CONFIRM","url":"https://support.citrix.com/article/CTX239432"},{"name":"DSA-4369","refsource":"DEBIAN","url":"https://www.debian.org/security/2019/dsa-4369"},{"name":"106182","refsource":"BID","url":"http://www.securityfocus.com/bid/106182"},{"name":"https://xenbits.xen.org/xsa/advisory-275.html","refsource":"MISC","url":"https://xenbits.xen.org/xsa/advisory-275.html"},{"name":"FEDORA-2019-bce6498890","refsource":"FEDORA","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UXC6BME7SXJI2ZIATNXCAH7RGPI4UKTT/"},{"name":"openSUSE-SU-2019:1226","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00072.html"},{"name":"[debian-lts-announce] 20191008 [SECURITY] [DLA 1949-1] xen security update","refsource":"MLIST","url":"https://lists.debian.org/debian-lts-announce/2019/10/msg00008.html"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://support.citrix.com/article/CTX239432","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://www.debian.org/security/2019/dsa-4369","name":"DSA-4369","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://www.securityfocus.com/bid/106182","name":"106182","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://xenbits.xen.org/xsa/advisory-275.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UXC6BME7SXJI2ZIATNXCAH7RGPI4UKTT/","name":"FEDORA-2019-bce6498890","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00072.html","name":"openSUSE-SU-2019:1226","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/10/msg00008.html","name":"[debian-lts-announce] 20191008 [SECURITY] [DLA 1949-1] xen security update","tags":["mailing-list","x_refsource_MLIST","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T11:51:17.944Z"}}]}}}