Lucene search

K
ubuntucveUbuntu.comUB:CVE-2013-1964
HistoryMay 21, 2013 - 12:00 a.m.

CVE-2013-1964

2013-05-2100:00:00
ubuntu.com
ubuntu.com
12

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

25.9%

Xen 4.0.x and 4.1.x incorrectly releases a grant reference when releasing a
non-v1, non-transitive grant, which allows local guest administrators to
cause a denial of service (host crash), obtain sensitive information, or
possibly have other impacts via unspecified vectors.

Notes

Author Note
mdeslaur hypervisor packages are in universe. For issues in the hypervisor, add appropriate tags to each section, ex: Tags_xen: universe-binary This is XSA-50
OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchxen< 4.1.2-2ubuntu2.9UNKNOWN
ubuntu12.10noarchxen< 4.1.3-3ubuntu1.6UNKNOWN

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

25.9%