CVE

Id
64501  
CVE No.
CVE-2013-4554  
Status
Candidate  
Description
Xen 3.0.3 through 4.1.x (possibly 4.1.6.1), 4.2.x (possibly 4.2.3), and 4.3.x (possibly 4.3.1) does not properly prevent access to hypercalls, which allows local guest users to gain privileges via a crafted application running in ring 1 or 2.  
Phase
Assigned (20130612)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
635766 64501 CVE-2013-4554 MLIST:[oss-security] 20131126 Xen Security Advisory 76 (CVE-2013-4554) - Hypercalls exposed to privilege rings 1 and 2 of HVM guests  View
635767 64501 CVE-2013-4554 URL:http://www.openwall.com/lists/oss-security/2013/11/26/9  View
635768 64501 CVE-2013-4554 GENTOO:GLSA-201407-03  View
635769 64501 CVE-2013-4554 URL:http://security.gentoo.org/glsa/glsa-201407-03.xml  View
635770 64501 CVE-2013-4554 REDHAT:RHSA-2014:0285  View
635771 64501 CVE-2013-4554 URL:http://rhn.redhat.com/errata/RHSA-2014-0285.html  View
635772 64501 CVE-2013-4554 SUSE:openSUSE-SU-2013:1876  View
635773 64501 CVE-2013-4554 URL:http://lists.opensuse.org/opensuse-updates/2013-12/msg00059.html  View
635774 64501 CVE-2013-4554 SUSE:SUSE-SU-2014:0411  View
635775 64501 CVE-2013-4554 URL:http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00015.html  View
635776 64501 CVE-2013-4554 SUSE:SUSE-SU-2014:0372  View
635777 64501 CVE-2013-4554 URL:http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00010.html  View
635778 64501 CVE-2013-4554 SUSE:SUSE-SU-2014:0446  View
635779 64501 CVE-2013-4554 URL:http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html  View
635780 64501 CVE-2013-4554 SUSE:SUSE-SU-2014:0470  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
23616 JVNDB-2013-005191 lighttpd における権限を取得される脆弱性 lighttpd は、(1) setuid、(2) setgid、または (3) setgroups 関数の戻り値をチェックしないため、再起動された場合に lighttpd が root として実行される原因となり、権限を取得される脆弱性が存在します。 CVE-2013-4559 64501 7.6 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005191.html  View