PT-2013-2174 · Linux+2 · Xen+2

Jan Beulich · Publicado 2013-02-12 · Atualizado 2024-06-15 · CVE-2013-0231

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Xen for Linux kernel versions 2.6.18 through 3.8

Description The issue allows guest OS users with PCI device access to cause a denial of service via a large number of kernel log messages. This is due to the pciback enable msi function in the PCI backend driver.

Recommendations For versions 2.6.18 through 3.8, consider disabling the pciback enable msi function as a temporary workaround to minimize the risk of exploitation. Restrict access to PCI devices for guest OS users to prevent the denial of service. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2013-0231

DSA-2632-1

MGASA-2013-0203

MGASA-2013-0204

MGASA-2013-0209

MGASA-2013-0210

MGASA-2013-0211

MGASA-2013-0212

MGASA-2013-0213

MGASA-2013-0214

MGASA-2013-0215

OPENSUSE-SU-2013_0395-1

OPENSUSE-SU-2013_0396-1

OPENSUSE-SU-2013_0925-1

OPENSUSE-SU-2024:10128-1

RHSA-2013:0747

RHSA-2013_0747

SUSE-SU-2015:0481-1

SUSE-SU-2015:0652-1

SUSE-SU-2019:14051-1

SUSE-SU-2019_14051-1

USN-1767-1

USN-1768-1

USN-1769-1

USN-1774-1

Produtos afetados

Red Hat

Suse

Xen

Referências · 425

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/rds_atomic_free_op_null_pointer_deref_priv_esc.rb · Exploit
• 🔥 https://github.com/realtalk/cve-2013-2094 · Exploit
• 🔥 https://github.com/hiikezoe/libperf_event_exploit · Exploit
• 🔥 https://github.com/Pashkela/CVE-2013-2094 · Exploit
• 🔥 https://github.com/timhsutw/cve-2013-2094 · Exploit
• https://github.com/torvalds/linux/commit/06b6a1cf6e776426766298d055bb3991957d90a7 · Nota
• https://github.com/torvalds/linux/commit/b5a1eeef04cc7859f34dec9b72ea1b28e4aba07c · Nota
• https://github.com/torvalds/linux/commit/48856286b64e4b66ec62b94e504d0b29c1ade664 · Nota
• https://github.com/torvalds/linux/commit/9c52057c698fb96f8f07e7a4bcf4801a092bda89 · Nota
• https://github.com/torvalds/linux/commit/9899d11f654474d2d54ea52ceaa2a1f4db3abd68 · Nota
• https://github.com/torvalds/linux/commit/5f00110f7273f9ff04ac69a5f85bb535a4fd0987 · Nota
• https://github.com/torvalds/linux/commit/8d0c2d10dd72c5292eda7a06231056a4c972e4cc · Nota
• https://github.com/torvalds/linux/commit/13d518074a952d33d47c428419693f63389547e9 · Nota
• https://github.com/torvalds/linux/commit/a2c118bfab8bc6b8bb213abfc35201e441693d55 · Nota
• https://github.com/torvalds/linux/commit/68cb695ccecf949d48949e72f8ce591fdaaa325c · Nota