CVE

Id
64303  
CVE No.
CVE-2013-4356  
Status
Candidate  
Description
Xen 4.3.x writes hypervisor mappings to certain shadow pagetables when live migration is performed on hosts with more than 5TB of RAM, which allows local 64-bit PV guests to read or write to invalid memory and cause a denial of service (crash).  
Phase
Assigned (20130612)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
634294 64303 CVE-2013-4356 MLIST:[oss-security] 20130930 Xen Security Advisory 64 (CVE-2013-4356) - Memory accessible by 64-bit PV guests under live migration  View
634295 64303 CVE-2013-4356 URL:http://www.openwall.com/lists/oss-security/2013/09/30/2  View
634296 64303 CVE-2013-4356 GENTOO:GLSA-201407-03  View
634297 64303 CVE-2013-4356 URL:http://security.gentoo.org/glsa/glsa-201407-03.xml  View
634298 64303 CVE-2013-4356 BID:62709  View
634299 64303 CVE-2013-4356 URL:http://www.securityfocus.com/bid/62709  View
634300 64303 CVE-2013-4356 SECUNIA:54962  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
22877 JVNDB-2013-004452 Xen の fbld 命令のエミュレーションにおけるハイパーバイザのスタック情報を取得される脆弱性 Xen の fbld 命令のエミュレーションは、ソースの実効アドレスに対して正しい変数を使用しないため、ハイパーバイザのスタック情報を取得される脆弱性が存在します。 CVE-2013-4361 64303 2.1 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004452.html  View