CVE-2013-1920 in Citrix Xen

요약 (영어)

Xen 4.2.x, 4.1.x, and earlier, when the hypervisor is running "under memory pressure" and the Xen Security Module (XSM) is enabled, uses the wrong ordering of operations when extending the per-domain event channel tracking table, which causes a use-after-free and allows local guest kernels to inject arbitrary events and gain privileges via unspecified vectors.

예약하다

2013. 02. 19.

공개

2013. 04. 12.

엔트리

VulDB provides additional information and datapoints for this CVE:

아이디	취약성	CWE	악용	대책	CVE
8178	Citrix Xen Per-Domain Event Channel Tracking Tables 권한 상승	264	정의되지 않음	공식 수정	CVE-2013-1920