PT-2013-5069 · Xen+2 · Xen+2

Jan Beulich · Publicado 2013-12-24 · Atualizado 2024-06-15 · CVE-2013-4554

Positive Technologies (AI Summary)

CVSS v2.0

5.2

Média

Vetor base

AV:A/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Xen versions 3.0.3 through 4.1.x Xen versions 4.2.x Xen versions 4.3.x

Description The issue allows local guest users to gain privileges via a crafted application running in ring 1 or 2, due to improper prevention of access to hypercalls.

Recommendations For Xen versions 3.0.3 through 4.1.x, update to a version that properly restricts access to hypercalls. For Xen versions 4.2.x, update to a version that properly restricts access to hypercalls. For Xen versions 4.3.x, update to a version that properly restricts access to hypercalls.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2013-4554

OPENSUSE-SU-2024:10196-1

RHSA-2014:0285

RHSA-2014_0285

Produtos afetados

Red Hat

Suse

Xen

Referências · 155

• https://github.com/torvalds/linux/commit/6062a8dc0517bce23e3c2f7d2fea5e22411269a3 · Nota
• https://github.com/torvalds/linux/commit/6fb392b1a63ae36c31f62bc3fc8630b49d602b62 · Nota
• https://github.com/torvalds/linux/commit/d049f74f2dbe71354d43d393ac3a188947811348 · Nota
• https://suse.com/security/cve/CVE-2015-8554 · Nota
• https://suse.com/security/cve/CVE-2016-1922 · Nota
• https://suse.com/security/cve/CVE-2016-1714 · Nota
• https://suse.com/security/cve/CVE-2016-2271 · Nota
• https://suse.com/security/cve/CVE-2015-7835 · Nota
• https://suse.com/security/cve/CVE-2012-5525 · Nota
• https://suse.com/security/cve/CVE-2014-7815 · Nota
• https://suse.com/security/cve/CVE-2014-3124 · Nota
• https://suse.com/security/cve/CVE-2015-8558 · Nota
• https://suse.com/security/cve/CVE-2013-1919 · Nota
• https://suse.com/security/cve/CVE-2016-1571 · Nota
• https://suse.com/security/cve/CVE-2015-4103 · Nota