CVE-2013-2077

2013-08-2800:00:00

ubuntu.com

5.2 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:M/Au:S/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

25.9%

JSON

Xen 4.0.x, 4.1.x, and 4.2.x does not properly restrict the contents of a
XRSTOR, which allows local PV guest users to cause a denial of service
(unhandled exception and hypervisor crash) via unspecified vectors.

Notes

Author	Note
seth-arnold	adding “no-xsave” to supervisor mitigates against the problem
mdeslaur	This is XSA-53

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchxen< 4.1.2-2ubuntu2.9UNKNOWN
ubuntu12.10noarchxen< 4.1.3-3ubuntu1.6UNKNOWN
ubuntu13.04noarchxen< 4.2.1-0ubuntu3.2UNKNOWN