Xen 4.2.x, 4.1.x, and earlier, when the hypervisor is running "under memory pressure" and the Xen Security Module (XSM) is enabled, uses the wrong ordering of operations when extending the per-domain event channel tracking table, which causes a use-after-free and allows local guest kernels to inject arbitrary events and gain privileges via unspecified vectors.
CVSS Details
- CVSS 3.1 Base Score: 5.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade app-emulation/xen-tools.Upgrade app-emulation/xen-pvgrub.Upgrade app-emulation/xen. | Oct 30, 2017 | Apr 12, 2013 |
| Suse | — | Upgrade xen-tools-domUUpgrade xen-doc-pdfUpgrade xen-kmp-kdumpUpgrade xen-kmp-defaultUpgrade xen-doc-htmlUpgrade xen-tools-ioemuUpgrade xen-libs-32bitUpgrade xen-kmp-paeUpgrade xenUpgrade xen-libsUpgrade sle-sdk-releaseUpgrade xen-kmp-traceUpgrade xen-kmp-vmiUpgrade xen-kmp-smpUpgrade xen-doc-psUpgrade xen-kmp-debugUpgrade xen-toolsUpgrade xen-develUpgrade xen-kmp-desktopUpgrade xen-kmp-vmipaeUpgrade xen-kmp-kdumppaeUpgrade xen-kmp-bigsmp | Feb 17, 2015 | Apr 12, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub