{"id":"CVE-2018-19962","state":"PUBLISHED","title":"An issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS users to gain host OS privileges because small IOMMU mappings are unsafely combined i","description":"An issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS users to gain host OS privileges because small IOMMU mappings are unsafely combined into larger ones.","publishedAt":"2018-12-08T04:00:00.000Z","updatedAt":"2024-08-05T11:51:17.785Z","severity":null,"assigner":"mitre","products":["n/a n/a"],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":["https://support.citrix.com/article/CTX239432","https://www.debian.org/security/2019/dsa-4369","http://www.securityfocus.com/bid/106182","https://xenbits.xen.org/xsa/advisory-275.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UXC6BME7SXJI2ZIATNXCAH7RGPI4UKTT/","http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00072.html","https://lists.debian.org/debian-lts-announce/2019/10/msg00008.html"],"weaknesses":[],"ingestedAt":"2026-10-29T19:44:34.704Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2018/19xxx/CVE-2018-19962.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2018-19962","state":"PUBLISHED","datePublished":"2018-12-08T04:00:00.000Z","dateUpdated":"2024-08-05T11:51:17.785Z","assignerShortName":"mitre","assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","dateReserved":"2018-12-07T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"An issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS users to gain host OS privileges because small IOMMU mappings are unsafely combined into larger ones."}],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"https://support.citrix.com/article/CTX239432","tags":["x_refsource_CONFIRM"]},{"url":"https://www.debian.org/security/2019/dsa-4369","name":"DSA-4369","tags":["vendor-advisory","x_refsource_DEBIAN"]},{"url":"http://www.securityfocus.com/bid/106182","name":"106182","tags":["vdb-entry","x_refsource_BID"]},{"url":"https://xenbits.xen.org/xsa/advisory-275.html","tags":["x_refsource_MISC"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UXC6BME7SXJI2ZIATNXCAH7RGPI4UKTT/","name":"FEDORA-2019-bce6498890","tags":["vendor-advisory","x_refsource_FEDORA"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00072.html","name":"openSUSE-SU-2019:1226","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/10/msg00008.html","name":"[debian-lts-announce] 20191008 [SECURITY] [DLA 1949-1] xen security update","tags":["mailing-list","x_refsource_MLIST"]}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"mitre","dateUpdated":"2019-10-08T14:06:09.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca"},"datePublic":"2018-12-07T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2018-19962","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"An issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS users to gain host OS privileges because small IOMMU mappings are unsafely combined into larger ones."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"https://support.citrix.com/article/CTX239432","refsource":"CONFIRM","url":"https://support.citrix.com/article/CTX239432"},{"name":"DSA-4369","refsource":"DEBIAN","url":"https://www.debian.org/security/2019/dsa-4369"},{"name":"106182","refsource":"BID","url":"http://www.securityfocus.com/bid/106182"},{"name":"https://xenbits.xen.org/xsa/advisory-275.html","refsource":"MISC","url":"https://xenbits.xen.org/xsa/advisory-275.html"},{"name":"FEDORA-2019-bce6498890","refsource":"FEDORA","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UXC6BME7SXJI2ZIATNXCAH7RGPI4UKTT/"},{"name":"openSUSE-SU-2019:1226","refsource":"SUSE","url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00072.html"},{"name":"[debian-lts-announce] 20191008 [SECURITY] [DLA 1949-1] xen security update","refsource":"MLIST","url":"https://lists.debian.org/debian-lts-announce/2019/10/msg00008.html"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://support.citrix.com/article/CTX239432","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://www.debian.org/security/2019/dsa-4369","name":"DSA-4369","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"http://www.securityfocus.com/bid/106182","name":"106182","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://xenbits.xen.org/xsa/advisory-275.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UXC6BME7SXJI2ZIATNXCAH7RGPI4UKTT/","name":"FEDORA-2019-bce6498890","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00072.html","name":"openSUSE-SU-2019:1226","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2019/10/msg00008.html","name":"[debian-lts-announce] 20191008 [SECURITY] [DLA 1949-1] xen security update","tags":["mailing-list","x_refsource_MLIST","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T11:51:17.785Z"}}]}}}