PT-2013-3470 · Xen+1 · Xen+1

Published 2013-04-12 · Updated 2017-08-29 · CVE-2013-1920

Positive Technologies (AI Summary)

CVSS v2.0

4.4

Medium

Base vector

AV:L/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Xen versions 4.2.x, 4.1.x, and earlier

Description The issue occurs when the hypervisor is under memory pressure and the Xen Security Module (XSM) is enabled. It involves the wrong ordering of operations when extending the per-domain event channel tracking table, leading to a use-after-free condition. This allows local guest kernels to inject arbitrary events and gain privileges.

Recommendations For Xen versions 4.2.x, 4.1.x, and earlier, consider disabling the Xen Security Module (XSM) as a temporary workaround until a patch is available. Restrict access to the event channel tracking table to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2013-1920

Affected Products

Suse

Xen

References · 14

• http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00015.html · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-201309-24.xml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-1920 · Security Note
• http://lists.opensuse.org/opensuse-updates/2013-06/msg00049.html · Vendor Advisory
• http://secunia.com/advisories/52857 · Vendor Advisory
• http://lists.xen.org/archives/html/xen-announce/2013-04/msg00000.html · Vendor Advisory
• http://securitytracker.com/id/1028388 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/83226 · Note
• http://secunia.com/advisories/55082 · Note
• http://openwall.com/lists/oss-security/2013/04/04/7 · Note
• http://osvdb.org/92050 · Note
• http://securityfocus.com/bid/58880 · Note