PT-2013-3494 · Xen+1 · Xen+1

Published 2013-05-21 · Updated 2017-06-30 · CVE-2013-1964

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Xen versions 4.0.x through 4.1.x

Description The issue allows local guest administrators to cause a denial of service, obtain sensitive information, or possibly have other impacts. This is due to the incorrect release of a grant reference when releasing a non-v1, non-transitive grant.

Recommendations For Xen versions 4.0.x through 4.1.x, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2013-1964

DSA-2666-1

Affected Products

Suse

Xen

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2013-1964 · Security Note
• http://security.gentoo.org/glsa/glsa-201309-24.xml · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2013-1964 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2013-1964 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2013-1964 · Vendor Advisory
• http://debian.org/security/2013/dsa-2666 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104537.html · Vendor Advisory
• http://openwall.com/lists/oss-security/2013/04/18/9 · Note
• http://secunia.com/advisories/55082 · Note
• http://securitytracker.com/id/1028459 · Note
• http://securityfocus.com/bid/59293 · Note