CVE-2013-1920: Use After Free
First published: Fri Apr 12 2013(Updated: )
Xen 4.2.x, 4.1.x, and earlier, when the hypervisor is running "under memory pressure" and the Xen Security Module (XSM) is enabled, uses the wrong ordering of operations when extending the per-domain event channel tracking table, which causes a use-after-free and allows local guest kernels to inject arbitrary events and gain privileges via unspecified vectors.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Xen xen-unstable | =3.0.2 | |
| Xen xen-unstable | =3.0.3 | |
| Xen xen-unstable | =3.0.4 | |
| Xen xen-unstable | =3.1.3 | |
| Xen xen-unstable | =3.1.4 | |
| Xen xen-unstable | =3.2.0 | |
| Xen xen-unstable | =3.2.1 | |
| Xen xen-unstable | =3.2.2 | |
| Xen xen-unstable | =3.2.3 | |
| Xen xen-unstable | =3.3.0 | |
| Xen xen-unstable | =3.3.1 | |
| Xen xen-unstable | =3.3.2 | |
| Xen xen-unstable | =3.4.0 | |
| Xen xen-unstable | =3.4.1 | |
| Xen xen-unstable | =3.4.2 | |
| Xen xen-unstable | =3.4.3 | |
| Xen xen-unstable | =3.4.4 | |
| Xen xen-unstable | =4.0.0 | |
| Xen xen-unstable | =4.0.1 | |
| Xen xen-unstable | =4.0.2 | |
| Xen xen-unstable | =4.0.3 | |
| Xen xen-unstable | =4.0.4 | |
| Xen xen-unstable | =4.1.0 | |
| Xen xen-unstable | =4.1.1 | |
| Xen xen-unstable | =4.1.2 | |
| Xen xen-unstable | =4.1.3 | |
| Xen xen-unstable | =4.1.4 | |
| Xen xen-unstable | =4.2.0 | |
| Xen xen-unstable | =4.2.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html
- http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html
- http://lists.opensuse.org/opensuse-updates/2013-06/msg00049.html
- http://lists.xen.org/archives/html/xen-announce/2013-04/msg00000.html
- http://osvdb.org/92050
- http://secunia.com/advisories/52857
- http://secunia.com/advisories/55082
- http://security.gentoo.org/glsa/glsa-201309-24.xml
- http://www.openwall.com/lists/oss-security/2013/04/04/7
- http://www.securityfocus.com/bid/58880
- http://www.securitytracker.com/id/1028388
- https://exchange.xforce.ibmcloud.com/vulnerabilities/83226
Frequently Asked Questions
What is the severity of CVE-2013-1920?
CVE-2013-1920 has a medium severity level due to its potential to allow local guest kernels to inject malicious code.
How do I fix CVE-2013-1920?
Fixing CVE-2013-1920 involves updating the Xen hypervisor to a version that is patched against the vulnerability.
What versions of Xen are affected by CVE-2013-1920?
CVE-2013-1920 affects Xen versions 4.2.x, 4.1.x, and earlier, including versions down to 3.0.2.
Can CVE-2013-1920 be exploited remotely?
CVE-2013-1920 cannot be exploited remotely, as it requires local access to the affected guest kernel.
What impact does CVE-2013-1920 have on system security?
CVE-2013-1920 can lead to unauthorized access and privilege escalation if exploited by a local attacker.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/remedy
- agent/references
- agent/author
- agent/weakness
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/xen
- canonical/xen xen-unstable
- version/xen xen-unstable/3.0.2
- version/xen xen-unstable/3.0.3
- version/xen xen-unstable/3.0.4
- version/xen xen-unstable/3.1.3
- version/xen xen-unstable/3.1.4
- version/xen xen-unstable/3.2.0
- version/xen xen-unstable/3.2.1
- version/xen xen-unstable/3.2.2
- version/xen xen-unstable/3.2.3
- version/xen xen-unstable/3.3.0
- version/xen xen-unstable/3.3.1
- version/xen xen-unstable/3.3.2
- version/xen xen-unstable/3.4.0
- version/xen xen-unstable/3.4.1
- version/xen xen-unstable/3.4.2
- version/xen xen-unstable/3.4.3
- version/xen xen-unstable/3.4.4
- version/xen xen-unstable/4.0.0
- version/xen xen-unstable/4.0.1
- version/xen xen-unstable/4.0.2
- version/xen xen-unstable/4.0.3
- version/xen xen-unstable/4.0.4
- version/xen xen-unstable/4.1.0
- version/xen xen-unstable/4.1.1
- version/xen xen-unstable/4.1.2
- version/xen xen-unstable/4.1.3
- version/xen xen-unstable/4.1.4
- version/xen xen-unstable/4.2.0
- version/xen xen-unstable/4.2.1