CVE-2013-4554 in Linux Foundation Xen
Résumé (Anglaise)
Xen 3.0.3 through 4.1.x (possibly 4.1.6.1), 4.2.x (possibly 4.2.3), and 4.3.x (possibly 4.3.1) does not properly prevent access to hypercalls, which allows local guest users to gain privileges via a crafted application running in ring 1 or 2.
Réserver
12/06/2013
Divulgation
24/12/2013
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 11329 | Linux Foundation Xen Guest Hypercall Privilege Check élévation de privilèges | 264 | Preuve de concept | Correctif officiel | CVE-2013-4554 |