Virtualization Server CVEs and Security Vulnerabilities

CVE-2008-1943

PVFB backend fails to validate frontend's framebuffer description

Buffer overflow in the backend of XenSource Xen Para Virtualized Frame Buffer (PVFB) 3.0 through 3.1.2 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a crafted description of a shared framebuffer.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed

Vendors

Redhat Xensource

Products

Desktop Enterprise Linux Virtualization Server and 1 more

CVE-2008-1944

PVFB SDL backend chokes on bogus screen updates

Buffer overflow in the backend framebuffer of XenSource Xen Para-Virtualized Framebuffer (PVFB) Message 3.0 through 3.0.3 allows local users to cause a denial of service (SDL crash) and possibly execute arbitrary code via "bogus screen updates," related to missing validation of the "format of messages."

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed