CVE

Id
66347  
CVE No.
CVE-2013-6400  
Status
Candidate  
Description
Xen 4.2.x and 4.3.x, when using Intel VT-d and a PCI device has been assigned, does not clear the flag that suppresses IOMMU TLB flushes when unspecified errors occur, which causes the TLB entries to not be flushed and allows local guest administrators to cause a denial of service (host crash) or gain privileges via unspecified vectors.  
Phase
Assigned (20131104)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
644745 66347 CVE-2013-6400 MLIST:[Xen-announce] 20131210 Xen Security Advisory 80 (CVE-2013-6400) - IOMMU TLB flushing may be inadvertently suppressed  View
644746 66347 CVE-2013-6400 URL:http://lists.xen.org/archives/html/xen-announce/2013-12/msg00002.html  View
644747 66347 CVE-2013-6400 MLIST:[oss-security] 20131210 Xen Security Advisory 80 (CVE-2013-6400) - IOMMU TLB flushing may be inadvertently suppressed  View
644748 66347 CVE-2013-6400 URL:http://www.openwall.com/lists/oss-security/2013/12/10/7  View
644749 66347 CVE-2013-6400 FEDORA:FEDORA-2013-23457  View
644750 66347 CVE-2013-6400 URL:http://lists.fedoraproject.org/pipermail/package-announce/2013-December/125111.html  View
644751 66347 CVE-2013-6400 FEDORA:FEDORA-2013-23466  View
644752 66347 CVE-2013-6400 URL:http://lists.fedoraproject.org/pipermail/package-announce/2013-December/125081.html  View
644753 66347 CVE-2013-6400 GENTOO:GLSA-201407-03  View
644754 66347 CVE-2013-6400 URL:http://security.gentoo.org/glsa/glsa-201407-03.xml  View
644755 66347 CVE-2013-6400 SUSE:SUSE-SU-2014:0373  View
644756 66347 CVE-2013-6400 URL:http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00011.html  View
644757 66347 CVE-2013-6400 SECTRACK:1029468  View
644758 66347 CVE-2013-6400 URL:http://www.securitytracker.com/id/1029468  View
644759 66347 CVE-2013-6400 SECUNIA:55932  View

Related JVN