PT-2013-3469 · Xen+1 · Xen+1

Publicado 2013-05-13 · Atualizado 2024-06-15 · CVE-2013-1919

Positive Technologies (AI Summary)

CVSS v2.0

4.7

Média

Vetor base

AV:L/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Xen versions 4.1.x through 4.2.x

Description The issue allows local stub domain clients to gain access to IRQs and cause a denial of service via vectors related to "passed-through IRQs or PCI devices" due to improper restriction of access to IRQs.

Recommendations For versions 4.1.x through 4.2.x, consider restricting access to passed-through IRQs or PCI devices to minimize the risk of exploitation. As a temporary workaround, limit the ability of local stub domain clients to access IRQs until a proper fix is applied. At the moment, there is no information about a newer version that contains a fix for this issue.

Correção

DoS

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2013-1919

DSA-2662-1

OPENSUSE-SU-2024:10196-1

Produtos afetados

Suse

Xen

Referências · 138

• https://suse.com/security/cve/CVE-2014-3124 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:10196-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2014-3672 · Nota
• https://suse.com/security/cve/CVE-2015-7970 · Nota
• http://lists.opensuse.org/opensuse-updates/2013-06/msg00049.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2012-4411 · Nota
• https://suse.com/security/cve/CVE-2016-2538 · Nota
• https://suse.com/security/cve/CVE-2015-7969 · Nota
• https://suse.com/security/cve/CVE-2015-8615 · Nota
• http://secunia.com/advisories/55082 · Nota
• https://suse.com/security/cve/CVE-2014-5146 · Nota
• https://suse.com/security/cve/CVE-2016-1981 · Nota
• https://suse.com/security/cve/CVE-2013-0153 · Nota
• https://suse.com/security/cve/CVE-2014-5149 · Nota
• https://suse.com/security/cve/CVE-2015-8550 · Nota