CVE-2013-4370: Buffer Overflow
The ocaml binding for the xcvcpugetaffinity function in Xen 4.2.x and 4.3.x frees certain memory that may still be intended for use, which allows local users to cause a denial of service (heap corruption and crash) and possibly execute arbitrary code via unspecified vectors that trigger a (1) use-after-free or (2) double free.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4370?
CVE-2013-4370 is considered a high severity vulnerability due to its potential to cause denial of service and arbitrary code execution.
How do I fix CVE-2013-4370?
To fix CVE-2013-4370, upgrade to a non-vulnerable version of Xen, specifically versions 4.2.x beyond 4.2.3 or any 4.3.x version.
Who is affected by CVE-2013-4370?
CVE-2013-4370 affects users of Xen versions 4.2.0 to 4.2.3 and 4.3.0.
What are the potential consequences of CVE-2013-4370?
The consequences of CVE-2013-4370 include heap corruption, system crashes, and potential exploitation for arbitrary code execution.
Is CVE-2013-4370 exploitable remotely?
CVE-2013-4370 is primarily a local vulnerability, meaning it is exploitable only by users with local access to the affected system.