NVD

Id
36584  
Name
CVE-2013-0228  
Description
The xen_iret function in arch/x86/xen/xen-asm_32.S in the Linux kernel before 3.7.9 on 32-bit Xen paravirt_ops platforms does not properly handle an invalid value in the DS segment register, which allows guest OS users to gain guest OS privileges via a crafted application.  
Reject
 
CVSS Version
2  
CVSS Score
6.2  
Severity
Medium  
CVSS Base Score
6.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-03-01  
Modified Date
2013-08-22  
Seq
2013-0228  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
186906 36584 CVE-2013-0228 http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=13d2b4d11d69a92574a55bfd985cfb0ca77aebdc  View
186907 36584 CVE-2013-0228 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.9  View
186908 36584 CVE-2013-0228 MDVSA-2013:176  View
186909 36584 CVE-2013-0228 [oss-security] 20130213 Xen Security Advisory 42 (CVE-2013-0228) - Linux kernel hits general protection if %ds is corrupt for 32-bit PVOPS.  View
186910 36584 CVE-2013-0228 USN-1795-1  View
186911 36584 CVE-2013-0228 USN-1796-1  View
186912 36584 CVE-2013-0228 USN-1797-1  View
186913 36584 CVE-2013-0228 USN-1805-1  View
186914 36584 CVE-2013-0228 USN-1808-1  View
186915 36584 CVE-2013-0228 https://bugzilla.redhat.com/show_bug.cgi?id=906309  View
186916 36584 CVE-2013-0228 https://github.com/torvalds/linux/commit/13d2b4d11d69a92574a55bfd985cfb0ca77aebdc  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20150 JVNDB-2013-001725 32-bit Xen paravirt_ops プラットフォーム上で稼働する Linux Kernel における権限を取得される脆弱性 32-bit Xen paravirt_ops プラットフォーム上で稼働する Linux Kernel の arch/x86/xen/xen-asm_32.S 内の xen_iret 関数は、DS セグメントレジスタ内の不正な値を適切に処理しないため、権限を取得される脆弱性が存在します。 CVE-2013-0228 60170 CVE-2013-0228 36584 6.2 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001725.html 2013-02-17 2013-06-12 View