CVE

Id
66322  
CVE No.
CVE-2013-6375  
Status
Candidate  
Description
Xen 4.2.x and 4.3.x, when using Intel VT-d for PCI passthrough, does not properly flush the TLB after clearing a present translation table entry, which allows local guest administrators to cause a denial of service or gain privileges via unspecified vectors related to an "inverted boolean parameter."  
Phase
Assigned (20131104)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
644441 66322 CVE-2013-6375 MLIST:[oss-security] 20131120 Xen Security Advisory 78 - Insufficient TLB flushing in VT-d (iommu) code  View
644442 66322 CVE-2013-6375 URL:http://www.openwall.com/lists/oss-security/2013/11/20/3  View
644443 66322 CVE-2013-6375 MLIST:[oss-security] 20131121 Re: Xen Security Advisory 78 - Insufficient TLB flushing in VT-d (iommu) code  View
644444 66322 CVE-2013-6375 URL:http://www.openwall.com/lists/oss-security/2013/11/21/1  View
644445 66322 CVE-2013-6375 GENTOO:GLSA-201407-03  View
644446 66322 CVE-2013-6375 URL:http://security.gentoo.org/glsa/glsa-201407-03.xml  View
644447 66322 CVE-2013-6375 SUSE:openSUSE-SU-2013:1876  View
644448 66322 CVE-2013-6375 URL:http://lists.opensuse.org/opensuse-updates/2013-12/msg00059.html  View
644449 66322 CVE-2013-6375 SECTRACK:1029369  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
23739 JVNDB-2013-005314 Linux Kernel の drivers/scsi/aacraid/commctrl.c の aac_send_raw_srb 関数におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の drivers/scsi/aacraid/commctrl.c の aac_send_raw_srb 関数は、特定のサイズ値を適切に検証しないため、サービス運用妨害 (無効なポインタデリファレンス) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2013-6380 66322 4.7 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005314.html  View