Lucene search

K
nvd[email protected]NVD:CVE-2013-4553
HistoryDec 24, 2013 - 7:55 p.m.

CVE-2013-4553

2013-12-2419:55:07
CWE-119
web.nvd.nist.gov
4

CVSS2

5.2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:M/Au:S/C:N/I:N/A:C

AI Score

6

Confidence

High

EPSS

0.001

Percentile

26.7%

The XEN_DOMCTL_getmemlist hypercall in Xen 3.4.x through 4.3.x (possibly 4.3.1) does not always obtain the page_alloc_lock and mm_rwlock in the same order, which allows local guest administrators to cause a denial of service (host deadlock).

Affected configurations

Nvd
Node
xenxenMatch3.4.0
OR
xenxenMatch3.4.1
OR
xenxenMatch3.4.2
OR
xenxenMatch3.4.3
OR
xenxenMatch3.4.4
OR
xenxenMatch4.0.0
OR
xenxenMatch4.0.1
OR
xenxenMatch4.0.2
OR
xenxenMatch4.0.3
OR
xenxenMatch4.0.4
OR
xenxenMatch4.1.0
OR
xenxenMatch4.1.1
OR
xenxenMatch4.1.2
OR
xenxenMatch4.1.3
OR
xenxenMatch4.1.4
OR
xenxenMatch4.1.5
OR
xenxenMatch4.1.6.1
OR
xenxenMatch4.2.0
OR
xenxenMatch4.2.1
OR
xenxenMatch4.2.2
OR
xenxenMatch4.2.3
OR
xenxenMatch4.3.0
OR
xenxenMatch4.3.1
VendorProductVersionCPE
xenxen3.4.0cpe:2.3:o:xen:xen:3.4.0:*:*:*:*:*:*:*
xenxen3.4.1cpe:2.3:o:xen:xen:3.4.1:*:*:*:*:*:*:*
xenxen3.4.2cpe:2.3:o:xen:xen:3.4.2:*:*:*:*:*:*:*
xenxen3.4.3cpe:2.3:o:xen:xen:3.4.3:*:*:*:*:*:*:*
xenxen3.4.4cpe:2.3:o:xen:xen:3.4.4:*:*:*:*:*:*:*
xenxen4.0.0cpe:2.3:o:xen:xen:4.0.0:*:*:*:*:*:*:*
xenxen4.0.1cpe:2.3:o:xen:xen:4.0.1:*:*:*:*:*:*:*
xenxen4.0.2cpe:2.3:o:xen:xen:4.0.2:*:*:*:*:*:*:*
xenxen4.0.3cpe:2.3:o:xen:xen:4.0.3:*:*:*:*:*:*:*
xenxen4.0.4cpe:2.3:o:xen:xen:4.0.4:*:*:*:*:*:*:*
Rows per page:
1-10 of 231

CVSS2

5.2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:M/Au:S/C:N/I:N/A:C

AI Score

6

Confidence

High

EPSS

0.001

Percentile

26.7%