PT-2013-3470 · Xen+1 · Xen+1

Publicado 2013-04-12 · Atualizado 2017-08-29 · CVE-2013-1920

Positive Technologies (AI Summary)

CVSS v2.0

4.4

Média

Vetor base

AV:L/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Xen versions 4.2.x, 4.1.x, and earlier

Description The issue occurs when the hypervisor is under memory pressure and the Xen Security Module (XSM) is enabled. It involves the wrong ordering of operations when extending the per-domain event channel tracking table, leading to a use-after-free condition. This allows local guest kernels to inject arbitrary events and gain privileges.

Recommendations For Xen versions 4.2.x, 4.1.x, and earlier, consider disabling the Xen Security Module (XSM) as a temporary workaround until a patch is available. Restrict access to the event channel tracking table to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2013-1920

Produtos afetados

Suse

Xen

Referências · 14

• http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html · Aviso do Fabricante
• http://securitytracker.com/id/1028388 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/83226 · Nota
• http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html · Aviso do Fabricante
• http://secunia.com/advisories/55082 · Nota
• http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00015.html · Aviso do Fabricante
• http://security.gentoo.org/glsa/glsa-201309-24.xml · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2013-1920 · Nota de Segurança
• http://lists.opensuse.org/opensuse-updates/2013-06/msg00049.html · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2013/04/04/7 · Nota
• http://secunia.com/advisories/52857 · Aviso do Fabricante
• http://osvdb.org/92050 · Nota
• http://lists.xen.org/archives/html/xen-announce/2013-04/msg00000.html · Aviso do Fabricante
• http://securityfocus.com/bid/58880 · Nota