PT-2013-5043 · Xen+2 · Xen+2

Andrew Cooper · Publicado 2013-11-02 · Atualizado 2024-06-15 · CVE-2013-4494

Positive Technologies (AI Summary)

CVSS v2.0

5.2

Média

Vetor base

AV:A/AC:M/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Xen versions prior to 4.1.x, 4.2.x, and 4.3.x

Description The issue allows local guest administrators with access to multiple vcpus to cause a denial of service (host deadlock) due to the incorrect locking order of page alloc lock and grant table.lock.

Recommendations For versions prior to 4.1.x, 4.2.x, and 4.3.x, at the moment, there is no information about a newer version that contains a fix for this issue.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2013-4494

DSA-3006-1

OPENSUSE-SU-2024:10196-1

RHSA-2014:0108

RHSA-2014_0108

SUSE-SU-2013_1867-1

Produtos afetados

Red Hat

Suse

Xen

Referências · 147

• https://osv.dev/vulnerability/openSUSE-SU-2024:10196-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2014-3672 · Nota
• https://suse.com/security/cve/CVE-2015-7970 · Nota
• https://suse.com/security/cve/CVE-2016-2538 · Nota
• https://suse.com/security/cve/CVE-2015-7969 · Nota
• https://suse.com/security/cve/CVE-2015-8615 · Nota
• https://suse.com/security/cve/CVE-2014-5146 · Nota
• https://suse.com/security/cve/CVE-2016-1981 · Nota
• https://bugzilla.novell.com/848657 · Nota
• http://lists.suse.com/mailman/listinfo/sle-security-updates · Nota
• https://suse.com/security/cve/CVE-2015-8550 · Nota
• https://suse.com/security/cve/CVE-2012-5513 · Nota
• https://suse.com/security/cve/CVE-2013-3495 · Nota
• https://suse.com/security/cve/CVE-2015-7512 · Nota
• https://suse.com/security/cve/CVE-2014-7815 · Nota