CVE

Id
64500  
CVE No.
CVE-2013-4553  
Status
Candidate  
Description
The XEN_DOMCTL_getmemlist hypercall in Xen 3.4.x through 4.3.x (possibly 4.3.1) does not always obtain the page_alloc_lock and mm_rwlock in the same order, which allows local guest administrators to cause a denial of service (host deadlock).  
Phase
Assigned (20130612)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
635755 64500 CVE-2013-4553 MLIST:[oss-security] 20131126 Xen Security Advisory 74 (CVE-2013-4553) - Lock order reversal between page_alloc_lock and mm_rwlock  View
635756 64500 CVE-2013-4553 URL:http://www.openwall.com/lists/oss-security/2013/11/26/8  View
635757 64500 CVE-2013-4553 DEBIAN:DSA-3006  View
635758 64500 CVE-2013-4553 URL:http://www.debian.org/security/2014/dsa-3006  View
635759 64500 CVE-2013-4553 GENTOO:GLSA-201407-03  View
635760 64500 CVE-2013-4553 URL:http://security.gentoo.org/glsa/glsa-201407-03.xml  View
635761 64500 CVE-2013-4553 SUSE:openSUSE-SU-2013:1876  View
635762 64500 CVE-2013-4553 URL:http://lists.opensuse.org/opensuse-updates/2013-12/msg00059.html  View
635763 64500 CVE-2013-4553 SUSE:SUSE-SU-2014:0372  View
635764 64500 CVE-2013-4553 URL:http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00010.html  View
635765 64500 CVE-2013-4553 SUSE:SUSE-SU-2014:0446  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
23819 JVNDB-2013-005394 Apache Subversion の mod_dav_svn の Apache HTTPD サーバモジュールにおけるサービス運用妨害 (DoS) の脆弱性 Apache Subversion の mod_dav_svn の Apache HTTPD サーバモジュールの repos.c 内の get_parent_resource 関数には、アサーションが有効な状態でビルドされ、SVNAutoversionin が有効である場合、サービス運用妨害 (表明違反および Apache プロセスの異常終了) 状態にされる脆弱性が存在します。 CVE-2013-4558 64500 3.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005394.html  View