PT-2013-4970 · Xen · Xen

Andrew Cooper · Publicado 2013-10-09 · Atualizado 2024-06-15 · CVE-2013-4356

Positive Technologies (AI Summary)

CVSS v2.0

5.4

Média

Vetor base

AV:A/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Xen versions 4.3.x

Description The issue allows local 64-bit PV guests to read or write to invalid memory and cause a denial of service (crash) when live migration is performed on hosts with more than 5TB of RAM.

Recommendations For Xen version 4.3.x, consider disabling live migration on hosts with more than 5TB of RAM as a temporary workaround until a patch is available.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2013-4356

OPENSUSE-SU-2024:10196-1

Produtos afetados

Xen

Referências · 133

• https://osv.dev/vulnerability/DEBIAN-CVE-2013-4356 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2014-3124 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:10196-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2014-3672 · Nota
• https://suse.com/security/cve/CVE-2015-7970 · Nota
• https://suse.com/security/cve/CVE-2012-4411 · Nota
• https://suse.com/security/cve/CVE-2016-2538 · Nota
• https://suse.com/security/cve/CVE-2015-7969 · Nota
• https://suse.com/security/cve/CVE-2015-8615 · Nota
• https://suse.com/security/cve/CVE-2014-5146 · Nota
• https://suse.com/security/cve/CVE-2016-1981 · Nota
• https://suse.com/security/cve/CVE-2013-0153 · Nota
• https://suse.com/security/cve/CVE-2014-5149 · Nota
• https://suse.com/security/cve/CVE-2015-8550 · Nota
• https://suse.com/security/cve/CVE-2012-5513 · Nota