CVE-2013-1432

Advisory lineage Upstream: 0 Downstream: 3
Modified
Published: 28 Aug 2013, 17:00
Last modified:06 Aug 2024, 15:04

Vulnerability Summary

Overall Risk (default)
medium
30/100
CVSS Score
7.4 HIGH
v2.0 (nvd)
EPSS Score
0.41% LOW
0% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

28 Aug 2013, 17:00
Published
Vulnerability first disclosed
06 Aug 2024, 15:04
Last Modified
Vulnerability information updated

Description

Xen 4.1.x and 4.2.x, when the XSA-45 patch is in place, does not properly maintain references on pages stored for deferred cleanup, which allows local PV guest kernels to cause a denial of service (premature page free and hypervisor crash) or possibly gain privileges via unspecified vectors.

CVSS Metrics

  • v2.0•HIGH•Score: 7.4AV:A/AC:M/Au:S/C:C/I:C/A:C

EPSS Trends

Current EPSS score: 0.41%• Percentile: 62%

Techniques & Countermeasures

  • CWE-399•Resource Management Errors

    Weaknesses in this category are related to improper management of system resources.

Affected Systems

  • xen•xen

    4.2.0 | 4.2.1 | 4.2.2 | 4.1.0 | 4.1.1 | 4.1.2 | 4.1.3 | 4.1.4 | 4.1.5

References (6)