CVE

Id
64441  
CVE No.
CVE-2013-4494  
Status
Candidate  
Description
Xen before 4.1.x, 4.2.x, and 4.3.x does not take the page_alloc_lock and grant_table.lock in the same order, which allows local guest administrators with access to multiple vcpus to cause a denial of service (host deadlock) via unspecified vectors.  
Phase
Assigned (20130612)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
635240 64441 CVE-2013-4494 MLIST:[oss-security] 20131101 Re: Xen Security Advisory 73 - Lock order reversal between page allocation and grant table locks  View
635241 64441 CVE-2013-4494 URL:http://www.openwall.com/lists/oss-security/2013/11/01/3  View
635242 64441 CVE-2013-4494 MLIST:[oss-security] 20131101 Xen Security Advisory 73 - Lock order reversal between page allocation and grant table locks  View
635243 64441 CVE-2013-4494 URL:http://www.openwall.com/lists/oss-security/2013/11/01/2  View
635244 64441 CVE-2013-4494 DEBIAN:DSA-3006  View
635245 64441 CVE-2013-4494 URL:http://www.debian.org/security/2014/dsa-3006  View
635246 64441 CVE-2013-4494 GENTOO:GLSA-201407-03  View
635247 64441 CVE-2013-4494 URL:http://security.gentoo.org/glsa/glsa-201407-03.xml  View
635248 64441 CVE-2013-4494 REDHAT:RHSA-2014:0108  View
635249 64441 CVE-2013-4494 URL:http://rhn.redhat.com/errata/RHSA-2014-0108.html  View
635250 64441 CVE-2013-4494 SUSE:openSUSE-SU-2013:1876  View
635251 64441 CVE-2013-4494 URL:http://lists.opensuse.org/opensuse-updates/2013-12/msg00059.html  View
635252 64441 CVE-2013-4494 SUSE:SUSE-SU-2014:0411  View
635253 64441 CVE-2013-4494 URL:http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00015.html  View
635254 64441 CVE-2013-4494 SUSE:SUSE-SU-2014:0446  View
635255 64441 CVE-2013-4494 URL:http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html  View
635256 64441 CVE-2013-4494 SUSE:SUSE-SU-2014:0470  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
24475 JVNDB-2013-006050 Drupal 用 Bean モジュールにおけるクロスサイトスクリプティングの脆弱性 Drupal 用 Bean モジュールには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2013-4499 64441 4.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006050.html  View