CVE

Id
64318  
CVE No.
CVE-2013-4371  
Status
Candidate  
Description
Use-after-free vulnerability in the libxl_list_cpupool function in the libxl toolstack library in Xen 4.2.x and 4.3.x, when running "under memory pressure," returns the original pointer when the realloc function fails, which allows local users to cause a denial of service (heap corruption and crash) and possibly execute arbitrary code via unspecified vectors.  
Phase
Assigned (20130612)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
634378 64318 CVE-2013-4371 MLIST:[oss-security] 20131010 Xen Security Advisory 70 (CVE-2013-4371) - use-after-free in libxl_list_cpupool under memory pressure  View
634379 64318 CVE-2013-4371 URL:http://www.openwall.com/lists/oss-security/2013/10/10/12  View
634380 64318 CVE-2013-4371 GENTOO:GLSA-201407-03  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
23871 JVNDB-2013-005446 X2Go Server の setgid wrapper libx2go-server-db-sqlite3-wrapper.c における任意のコードを実行される脆弱性 X2Go Server の setgid wrapper libx2go-server-db-sqlite3-wrapper.c には、libx2go-server-db-sqlite3-wrapper.pl のパスに関する処理に不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2013-4376 64318 7.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005446.html  View