Lucene search
Xen ProjectXSA-40HistoryJan 16, 2013 - 2:50 p.m.
Linux stack corruption in xen_failsafe_callback for 32bit PVOPS guests.
2013-01-1614:50:00
Xen Project
xenbits.xen.org
48
4.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
0.0004 Low
EPSS
Percentile
5.2%
ISSUE DESCRIPTION
xen_failsafe_callback incorrectly sets up its stack if an iret fault is injected by the hypervisor.
IMPACT
Malicious or buggy unprivileged userspace can cause the guest kernel to crash, or operate erroneously.
VULNERABLE SYSTEMS
All 32bit PVOPS versions of Linux are affected, since the introduction of Xen PVOPS support in 2.6.23. Classic-Xen kernels are not vulnerable.
Related
fedora
fedora
[SECURITY] Fedora 18 Update: kernel-3.7.2-204.fc18
2013-01-18 20:44:01
[SECURITY] Fedora 18 Update: kernel-3.7.6-201.fc18
2013-02-08 16:56:42
[SECURITY] Fedora 18 Update: kernel-3.7.8-202.fc18
2013-02-18 07:02:24
openvas
openvas
Ubuntu Update for linux USN-1725-1
2013-02-15 00:00:00
Ubuntu Update for linux-ec2 USN-1728-1
2013-02-22 00:00:00
Amazon Linux: Security Advisory (ALAS-2013-154)
2015-09-08 00:00:00
nessus
nessus
Amazon Linux AMI : kernel / nvidia (ALAS-2013-154)
2013-09-04 00:00:00
Ubuntu 10.04 LTS : linux vulnerability (USN-1725-1)
2013-02-15 00:00:00
Fedora 18 : kernel-3.7.2-204.fc18 (2013-0952)
2013-01-20 00:00:00
ubuntu
ubuntu
Linux kernel vulnerability
2013-02-14 00:00:00
Linux kernel (EC2) vulnerability
2013-02-19 00:00:00
Linux kernel (Oneiric backport) vulnerabilities
2013-02-12 00:00:00
cve
cve
CVE-2013-0190
2013-02-13 01:55:00
debiancve
debiancve
CVE-2013-0190
2013-02-13 01:55:00
prion
prion
Stack overflow
2013-02-13 01:55:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 04:52:56
amazon
amazon
Medium: kernel, nvidia
2013-02-04 15:45:00
ubuntucve
ubuntucve
CVE-2013-0190
2013-01-16 00:00:00
oraclelinux
oraclelinux
Unbreakable Enterprise kernel security update
2013-02-06 00:00:00
Unbreakable Enterprise kernel security update
2013-02-07 00:00:00
Oracle Linux 6 kernel security and bugfix update
2013-02-27 00:00:00
securityvulns
securityvulns
[USN-1720-1] Linux kernel vulnerabilities
2013-02-14 00:00:00
Linux kernel security vulnerabilities
2013-03-02 00:00:00
[USN-1767-1] Linux kernel vulnerabilities
2013-03-19 00:00:00
centos
centos
kernel, perf, python security update
2013-02-27 19:35:40
redhat
redhat
4.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
0.0004 Low
EPSS
Percentile
5.2%
Related for XSA-40