Resource Exhaustion The advisory has been revoked - it doesn't affect any version of package xen (opens in a new tab)

Threat Intelligence

0.52% (41^st percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk IDSNYK-ALPINE34-XEN-367395
published2 Aug 2016
disclosed2 Aug 2016

Report a new vulnerability Found a mistake?

Introduced: 2 Aug 2016

CVE-2016-5403 (opens in a new tab) CWE-400 (opens in a new tab)

Amendment

The Alpine security team deemed this advisory irrelevant for Alpine:3.4.

NVD Description

Note: Versions mentioned in the description apply only to the upstream xen package and not the xen package as distributed by Alpine.

The virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) by submitting requests without waiting for completion.