CVE

Id
61864  
CVE No.
CVE-2013-1917  
Status
Candidate  
Description
Xen 3.1 through 4.x, when running 64-bit hosts on Intel CPUs, does not clear the NT flag when using an IRET after a SYSENTER instruction, which allows PV guest users to cause a denial of service (hypervisor crash) by triggering a #GP fault, which is not properly handled by another IRET instruction.  
Phase
Assigned (20130219)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
619445 61864 CVE-2013-1917 MLIST:[oss-security] 20130418 Xen Security Advisory 44 (CVE-2013-1917) - Xen PV DoS vulnerability with SYSENTER  View
619446 61864 CVE-2013-1917 URL:http://www.openwall.com/lists/oss-security/2013/04/18/8  View
619447 61864 CVE-2013-1917 DEBIAN:DSA-2662  View
619448 61864 CVE-2013-1917 URL:http://www.debian.org/security/2012/dsa-2662  View
619449 61864 CVE-2013-1917 FEDORA:FEDORA-2013-6723  View
619450 61864 CVE-2013-1917 URL:http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104537.html  View
619451 61864 CVE-2013-1917 GENTOO:GLSA-201309-24  View
619452 61864 CVE-2013-1917 URL:http://security.gentoo.org/glsa/glsa-201309-24.xml  View
619453 61864 CVE-2013-1917 SUSE:openSUSE-SU-2013:0912  View
619454 61864 CVE-2013-1917 URL:http://lists.opensuse.org/opensuse-updates/2013-06/msg00049.html  View
619455 61864 CVE-2013-1917 SUSE:SUSE-SU-2014:0411  View
619456 61864 CVE-2013-1917 URL:http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00015.html  View
619457 61864 CVE-2013-1917 SUSE:SUSE-SU-2014:0446  View
619458 61864 CVE-2013-1917 URL:http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html  View
619459 61864 CVE-2013-1917 SUSE:SUSE-SU-2014:0470  View
619460 61864 CVE-2013-1917 URL:http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html  View
619461 61864 CVE-2013-1917 SECTRACK:1028455  View
619462 61864 CVE-2013-1917 URL:http://www.securitytracker.com/id/1028455  View
619463 61864 CVE-2013-1917 SECUNIA:55082  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
21071 JVNDB-2013-002646 Xen で使用される QEMU の qemu-nbd における任意のファイルを読まれる脆弱性 Xen で使用される QEMU の qemu-nbd は、ヘッダに基づいて raw ディスクイメージのフォーマットを決定するため、ホスト上の任意のファイルを読まれる脆弱性が存在します。 CVE-2013-1922 61864 3.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002646.html  View