CVE-2013-4329 in Xen
Summary
The xenlight library (libxl) in Xen 4.0.x through 4.2.x, when IOMMU is disabled, provides access to a busmastering-capable PCI passthrough device before the IOMMU setup is complete, which allows local HVM guest domains to gain privileges or cause a denial of service via a DMA instruction.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
06/12/2013
Disclosure
09/12/2013
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 10251 | Linux Foundation Xen HVM Passthrough libxl access control | 264 | Not defined | Official fix | CVE-2013-4329 |