CVE-2013-1920: Use After Free
First published: Fri Apr 12 2013(Updated: )
Xen 4.2.x, 4.1.x, and earlier, when the hypervisor is running "under memory pressure" and the Xen Security Module (XSM) is enabled, uses the wrong ordering of operations when extending the per-domain event channel tracking table, which causes a use-after-free and allows local guest kernels to inject arbitrary events and gain privileges via unspecified vectors.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Xen Xen | =3.0.2 | |
| Xen Xen | =3.0.3 | |
| Xen Xen | =3.0.4 | |
| Xen Xen | =3.1.3 | |
| Xen Xen | =3.1.4 | |
| Xen Xen | =3.2.0 | |
| Xen Xen | =3.2.1 | |
| Xen Xen | =3.2.2 | |
| Xen Xen | =3.2.3 | |
| Xen Xen | =3.3.0 | |
| Xen Xen | =3.3.1 | |
| Xen Xen | =3.3.2 | |
| Xen Xen | =3.4.0 | |
| Xen Xen | =3.4.1 | |
| Xen Xen | =3.4.2 | |
| Xen Xen | =3.4.3 | |
| Xen Xen | =3.4.4 | |
| Xen Xen | =4.0.0 | |
| Xen Xen | =4.0.1 | |
| Xen Xen | =4.0.2 | |
| Xen Xen | =4.0.3 | |
| Xen Xen | =4.0.4 | |
| Xen Xen | =4.1.0 | |
| Xen Xen | =4.1.1 | |
| Xen Xen | =4.1.2 | |
| Xen Xen | =4.1.3 | |
| Xen Xen | =4.1.4 | |
| Xen Xen | =4.2.0 | |
| Xen Xen | =4.2.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html
- http://lists.opensuse.org/opensuse-updates/2013-06/msg00049.html
- http://lists.xen.org/archives/html/xen-announce/2013-04/msg00000.html
- http://osvdb.org/92050
- http://secunia.com/advisories/52857
- http://secunia.com/advisories/55082
- http://security.gentoo.org/glsa/glsa-201309-24.xml
- http://www.openwall.com/lists/oss-security/2013/04/04/7
- http://www.securityfocus.com/bid/58880
- http://www.securitytracker.com/id/1028388
- https://exchange.xforce.ibmcloud.com/vulnerabilities/83226
- collector/nvd-index
- agent/author
- agent/weakness
- agent/severity
- agent/references
- agent/type
- agent/description
- agent/first-publish-date
- agent/remedy
- agent/softwarecombine
- agent/last-modified-date
- agent/tags
- agent/event
- collector/mitre-cve
- source/MITRE
- vendor/xen
- canonical/xen xen
- version/xen xen/3.0.2
- version/xen xen/3.0.3
- version/xen xen/3.0.4
- version/xen xen/3.1.3
- version/xen xen/3.1.4
- version/xen xen/3.2.0
- version/xen xen/3.2.1
- version/xen xen/3.2.2
- version/xen xen/3.2.3
- version/xen xen/3.3.0
- version/xen xen/3.3.1
- version/xen xen/3.3.2
- version/xen xen/3.4.0
- version/xen xen/3.4.1
- version/xen xen/3.4.2
- version/xen xen/3.4.3
- version/xen xen/3.4.4
- version/xen xen/4.0.0
- version/xen xen/4.0.1
- version/xen xen/4.0.2
- version/xen xen/4.0.3
- version/xen xen/4.0.4
- version/xen xen/4.1.0
- version/xen xen/4.1.1
- version/xen xen/4.1.2
- version/xen xen/4.1.3
- version/xen xen/4.1.4
- version/xen xen/4.2.0
- version/xen xen/4.2.1