PT-2013-3485 · Xen+1 · Xen+1

Publicado 2013-05-13 · Atualizado 2024-06-15 · CVE-2013-1952

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Baixa

Vetor base

AV:L/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Xen versions 4.x

Description The issue arises when Xen 4.x uses Intel VT-d for a bus mastering capable PCI device. It does not properly check the source when accessing a bridge device's interrupt remapping table entries for MSI interrupts. This allows local guest domains to cause a denial of service, specifically through interrupt injection, via unspecified vectors.

Recommendations For Xen version 4.x, update to a version that includes the fix for this issue to prevent local guest domains from causing a denial of service through interrupt injection.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2013-1952

DSA-2666-1

OPENSUSE-SU-2024:10196-1

Produtos afetados

Suse

Xen

Referências · 139

• https://suse.com/security/cve/CVE-2014-3124 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:10196-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2014-3672 · Nota
• https://suse.com/security/cve/CVE-2015-7970 · Nota
• https://suse.com/security/cve/CVE-2012-4411 · Nota
• https://suse.com/security/cve/CVE-2016-2538 · Nota
• https://suse.com/security/cve/CVE-2015-7969 · Nota
• https://suse.com/security/cve/CVE-2015-8615 · Nota
• http://secunia.com/advisories/55082 · Nota
• https://suse.com/security/cve/CVE-2014-5146 · Nota
• https://suse.com/security/cve/CVE-2016-1981 · Nota
• https://suse.com/security/cve/CVE-2013-0153 · Nota
• https://suse.com/security/cve/CVE-2014-5149 · Nota
• https://suse.com/security/cve/CVE-2015-8550 · Nota
• https://suse.com/security/cve/CVE-2012-5513 · Nota