Denial of Service Vulnerability in Xen 4.1.1 and Earlier with PCI[E] Device Control

CVE-2011-3131 · MEDIUM Severity

AV:L/AC:L/AU:S/C:N/I:N/A:C

Xen 4.1.1 and earlier allows local guest OS kernels with control of a PCI[E] device to cause a denial of service (CPU consumption and host hang) via many crafted DMA requests that are denied by the IOMMU, which triggers a livelock.

Learn more about our Web Application Penetration Testing UK.