Ubuntu.comUB:CVE-2013-4371CVE-2013-4371
4.4 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
5.1%
Use-after-free vulnerability in the libxl_list_cpupool function in the
libxl toolstack library in Xen 4.2.x and 4.3.x, when running “under memory
pressure,” returns the original pointer when the realloc function fails,
which allows local users to cause a denial of service (heap corruption and
crash) and possibly execute arbitrary code via unspecified vectors.
Notes
| Author | Note |
|---|---|
| jdstrand | per upstream, 4.2 and later |
| mdeslaur | This is XSA-70 |
Related
4.4 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
5.1%