REDHAT-BUG-910883

First published: Wed Feb 13 2013(Updated: )

The Xen netback implementation contains a couple of flaws which can allow a guest to cause a DoS in the backend domain, potentially affecting other domains in the system. <a href="https://access.redhat.com/security/cve/CVE-2013-0216">CVE-2013-0216</a> is a failure to sanity check the ring producer/consumer pointers which can allow a guest to cause netback to loop for an extended period preventing other work from occurring. <a href="https://access.redhat.com/security/cve/CVE-2013-0217">CVE-2013-0217</a> is a memory leak on an error path which is guest triggerable. A malicious guest with access to PV network devices can mount a DoS affecting the entire system. Acknowledgements: Red Hat would like to thank the Xen project for reporting this issue.

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/type
• agent/first-publish-date
• agent/last-modified-date
• collector/redhat-bugzilla
• source/Red Hat
• alias/CVE-2013-0216
• agent/source
• agent/severity
• agent/references
• agent/description
• agent/event
• agent/softwarecombine
• agent/tags
• agent/guess-ai
• agent/software-canonical-lookup
• agent/software-canonical-lookup-request
• vendor/xen
• canonical/xen xapi
• vendor/red hat
• canonical/red hat enterprise linux