CVE-2013-0228 in Citrix Xen
Summary
The xen_iret function in arch/x86/xen/xen-asm_32.S in the Linux kernel before 3.7.9 on 32-bit Xen paravirt_ops platforms does not properly handle an invalid value in the DS segment register, which allows guest OS users to gain guest OS privileges via a crafted application.
Reservation
12/06/2012
Disclosure
03/01/2013
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 7724 | Citrix Xen Linux Kernel xen_iret numeric error | 189 | Not defined | Official fix | CVE-2013-0228 |