CVE

Id
60162  
CVE No.
CVE-2013-0215  
Status
Candidate  
Description
oxenstored in Xen 4.1.x, Xen 4.2.x, and xen-unstable does not properly consider the state of the Xenstore ring during read operations, which allows guest OS users to cause a denial of service (daemon crash and host-control outage, or memory consumption) or obtain sensitive control-plane data by leveraging guest administrative access.  
Phase
Assigned (20121206)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
607267 60162 CVE-2013-0215 MLIST:[oss-security] 20130205 Xen Security Advisory 38 (CVE-2013-0215) - oxenstored incorrect handling of certain Xenbus ring states  View
607268 60162 CVE-2013-0215 URL:http://openwall.com/lists/oss-security/2013/02/05/10  View
607269 60162 CVE-2013-0215 CONFIRM:http://xenbits.xen.org/gitweb/?p=xen.git;a=commit;h=40f9c5e0a6d15b4ca1f6d4ed3a46f0871520eab5  View
607270 60162 CVE-2013-0215 CONFIRM:http://xenbits.xen.org/gitweb/?p=xen.git;a=commit;h=61401264eb00fae4ee4efc8e9a5067449283207b  View
607271 60162 CVE-2013-0215 GENTOO:GLSA-201309-24  View
607272 60162 CVE-2013-0215 URL:http://security.gentoo.org/glsa/glsa-201309-24.xml  View
607273 60162 CVE-2013-0215 SECUNIA:55082  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
20109 JVNDB-2013-001684 System Security Services Daemon におけるサービス運用妨害 (DoS) の脆弱性 System Security Services Daemon (SSSD) の以下の関数には、サービス運用妨害 (領域外メモリの読み込み、クラッシュおよび再起動) 状態となる脆弱性が存在します。 CVE-2013-0220 60162 5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001684.html  View