Lucene search

K
ubuntucveUbuntu.comUB:CVE-2013-4494
HistoryNov 02, 2013 - 12:00 a.m.

CVE-2013-4494

2013-11-0200:00:00
ubuntu.com
ubuntu.com
11

5.2 Medium

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:M/Au:S/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

26.5%

Xen before 4.1.x, 4.2.x, and 4.3.x does not take the page_alloc_lock and
grant_table.lock in the same order, which allows local guest administrators
with access to multiple vcpus to cause a denial of service (host deadlock)
via unspecified vectors.

Notes

Author Note
mdeslaur This is XSA-73
OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchxen< 4.1.5-0ubuntu0.12.04.2UNKNOWN
ubuntu12.10noarchxen< 4.1.5-0ubuntu0.12.10.2UNKNOWN
ubuntu13.04noarchxen< 4.2.2-0ubuntu0.13.04.2UNKNOWN
ubuntu13.10noarchxen< 4.3.0-1ubuntu1.1UNKNOWN

5.2 Medium

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:M/Au:S/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

26.5%