CVE-2007-5906 - Vulnerability Details - OpenCVE

Xen 3.1.1 allows virtual guest system users to cause a denial of service (hypervisor crash) by using a debug register (DR7) to set certain breakpoints.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Local

Access Complexity Medium

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Complete

This CVE is not in the KEV list.

The EPSS score is 0.00063.

Key SSVC decision points have not yet been added.

Vendors	Products
Redhat	Enterprise Linux
Xensource Inc	Xen

Configuration 1 [-]

cpe:2.3:a:xensource_inc:xen:3.1.1:*:*:*:*:*:*:*

Package	CPE	Advisory	Released Date
Red Hat Enterprise Linux 5
kernel-0:2.6.18-92.el5	cpe:/o:redhat:enterprise_linux:5	RHBA-2008:0314	2008-05-21T00:00:00Z

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2007-5876	Xen 3.1.1 allows virtual guest system users to cause a denial of service (hypervisor crash) by using a debug register (DR7) to set certain breakpoints.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html
http://lists.xensource.com/archives/html/xen-devel/2007-10/msg01048.html
http://secunia.com/advisories/28405
http://secunia.com/advisories/28412
http://secunia.com/advisories/28636
http://www.novell.com/linux/security/advisories/suse_security_summary_report.html
http://www.securityfocus.com/bid/27219
https://nvd.nist.gov/vuln/detail/CVE-2007-5906
https://www.cve.org/CVERecord?id=CVE-2007-5906

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2007-11-09T19:00:00

Updated: 2024-08-07T15:47:00.550Z

Reserved: 2007-11-09T00:00:00

Link: CVE-2007-5906

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2007-11-09T19:46:00.000

Modified: 2025-04-09T00:30:58.490

Link: CVE-2007-5906

Redhat

Severity : Important

Publid Date: 2007-10-31T00:00:00Z

Links: CVE-2007-5906 - Bugzilla

OpenCVE Enrichment

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-10-31T00:00:00", "descriptions": [{"lang": "en", "value": "Xen 3.1.1 allows virtual guest system users to cause a denial of service (hypervisor crash) by using a debug register (DR7) to set certain breakpoints."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2008-01-16T10:00:00", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "28412", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/28412"}, {"name": "SUSE-SR:2008:002", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://www.novell.com/linux/security/advisories/suse_security_summary_report.html"}, {"name": "[Xen-devel] 20071031 [PATCH, fixed] x86: fix debug register handling", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://lists.xensource.com/archives/html/xen-devel/2007-10/msg01048.html"}, {"name": "28405", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/28405"}, {"name": "27219", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/27219"}, {"name": "28636", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/28636"}, {"name": "SUSE-SR:2008:001", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-5906", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Xen 3.1.1 allows virtual guest system users to cause a denial of service (hypervisor crash) by using a debug register (DR7) to set certain breakpoints."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "28412", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/28412"}, {"name": "SUSE-SR:2008:002", "refsource": "SUSE", "url": "http://www.novell.com/linux/security/advisories/suse_security_summary_report.html"}, {"name": "[Xen-devel] 20071031 [PATCH, fixed] x86: fix debug register handling", "refsource": "MLIST", "url": "http://lists.xensource.com/archives/html/xen-devel/2007-10/msg01048.html"}, {"name": "28405", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/28405"}, {"name": "27219", "refsource": "BID", "url": "http://www.securityfocus.com/bid/27219"}, {"name": "28636", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/28636"}, {"name": "SUSE-SR:2008:001", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T15:47:00.550Z"}, "title": "CVE Program Container", "references": [{"name": "28412", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/28412"}, {"name": "SUSE-SR:2008:002", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"], "url": "http://www.novell.com/linux/security/advisories/suse_security_summary_report.html"}, {"name": "[Xen-devel] 20071031 [PATCH, fixed] x86: fix debug register handling", "tags": ["mailing-list", "x_refsource_MLIST", "x_transferred"], "url": "http://lists.xensource.com/archives/html/xen-devel/2007-10/msg01048.html"}, {"name": "28405", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/28405"}, {"name": "27219", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/27219"}, {"name": "28636", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/28636"}, {"name": "SUSE-SR:2008:001", "tags": ["vendor-advisory", "x_refsource_SUSE", "x_transferred"], "url": "http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-5906", "datePublished": "2007-11-09T19:00:00", "dateReserved": "2007-11-09T00:00:00", "dateUpdated": "2024-08-07T15:47:00.550Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:xensource_inc:xen:3.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "36206475-6E52-423C-B0CC-A24AC0311EE9", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Xen 3.1.1 allows virtual guest system users to cause a denial of service (hypervisor crash) by using a debug register (DR7) to set certain breakpoints."}, {"lang": "es", "value": "El Xen 3.1.1 permite a usuarios invitados virtuales provocar una denegaci\u00f3n de servicio (ca\u00edda del hypervisor) mediante el uso de un registro de depuraci\u00f3n (DR7) para establecer ciertos puntos de ruptura."}], "id": "CVE-2007-5906", "lastModified": "2025-04-09T00:30:58.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 4.7, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:L/AC:M/Au:N/C:N/I:N/A:C", "version": "2.0"}, "exploitabilityScore": 3.4, "impactScore": 6.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2007-11-09T19:46:00.000", "references": [{"source": "cve@mitre.org", "url": "http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://lists.xensource.com/archives/html/xen-devel/2007-10/msg01048.html"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/28405"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/28412"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/28636"}, {"source": "cve@mitre.org", "url": "http://www.novell.com/linux/security/advisories/suse_security_summary_report.html"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/27219"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://lists.xensource.com/archives/html/xen-devel/2007-10/msg01048.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/28405"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/28412"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/28636"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.novell.com/linux/security/advisories/suse_security_summary_report.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/27219"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}