CVE-2008-1952: Xensource Xen Para Virtualized Frame Buffer

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

The backend for XenSource Xen Para Virtualized Frame Buffer (PVFB) in Xen ioemu does not properly restrict the frame buffer size, which allows attackers to cause a denial of service (crash) by mapping an arbitrary amount of guest memory.

Affected products

• Xensource Xen Para Virtualized Frame Buffer: any version

Published 2008-06-23. Last modified 2026-06-16.