Bug 237345 (CVE-2007-1322)

Summary:	CVE-2007-1322 xen icebp instruction issue
Product:	[Other] Security Response	Reporter:	Marcel Holtmann <holtmann>
Component:	vulnerability	Assignee:	Don Dutile (Red Hat) <ddutile>
Status:	CLOSED NOTABUG	QA Contact:
Severity:	low	Docs Contact:
Priority:	low
Version:	unspecified	CC:	kreilly, security-response-team, xen-maint
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2007-09-24 08:42:37 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	237469
Bug Blocks:

Comment 4 Mark J. Cox 2007-09-19 13:29:06 UTC

        Tavis Ormandy discovered that the icebp instruction can be
        abused to terminate the emulation, resulting in denial of
        service.

public via http://taviso.decsystem.org/virtsec.pdf
also see http://lists.xensource.com/archives/html/xen-devel/2007-05/msg00021.html

Comment 6 Mark J. Cox 2007-09-24 08:42:37 UTC

Not vulnerable. This issue did not affect Xen as shipped with Red Hat Enterprise
Linux 5.