Description
Buffer overflow in the backend framebuffer of XenSource Xen Para-Virtualized Framebuffer (PVFB) Message 3.0 through 3.0.3 allows local users to cause a denial of service (SDL crash) and possibly execute arbitrary code via "bogus screen updates," related to missing validation of the "format of messages."
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | xen +1 | 3.0.3-41.el5_1.5 | RHSA-2008:0194 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhel Virtualization 5 | xen +1 | 3.0.3-41.el5_1.5 | RHSA-2008:0194 |
Advisories 1
- RHSA-2008:0194 Red Hat Security Advisory: xen security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- RHSA-2008:0194 vendor-advisory
- 1020009 vdb-entry
- xen-pvfb-message-dos(42388) vdb-entry
- 29963 third-party-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=443390
- oval:org.mitre.oval:def:10868 vdb-entry signature
- 29186 vdb-entry