CVE-2013-4554 in Xen
Summary
Xen 3.0.3 through 4.1.x (possibly 4.1.6.1), 4.2.x (possibly 4.2.3), and 4.3.x (possibly 4.3.1) does not properly prevent access to hypercalls, which allows local guest users to gain privileges via a crafted application running in ring 1 or 2.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
06/12/2013
Disclosure
12/24/2013
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 11329 | Linux Foundation Xen Guest Hypercall Privilege Check access control | 264 | Proof-of-Concept | Official fix | CVE-2013-4554 |