NVD

Id
38184  
Name
CVE-2013-2072  
Description
Buffer overflow in the Python bindings for the xc_vcpu_setaffinity call in Xen 4.0.x, 4.1.x, and 4.2.x allows local administrators with permissions to configure VCPU affinity to cause a denial of service (memory corruption and xend toolstack crash) and possibly gain privileges via a crafted cpumap.  
Reject
 
CVSS Version
2  
CVSS Score
7.4  
Severity
High  
CVSS Base Score
7.4  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
4.4  
CVSS Vector
(AV:A/AC:M/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-08-28  
Modified Date
2016-12-30  
Seq
2013-2072  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
195225 38184 CVE-2013-2072 FEDORA-2013-8571  View
195226 38184 CVE-2013-2072 FEDORA-2013-8590  View
195227 38184 CVE-2013-2072 FEDORA-2013-8513  View
195228 38184 CVE-2013-2072 SUSE-SU-2014:0446  View
195229 38184 CVE-2013-2072 DSA-3041  View
195230 38184 CVE-2013-2072 [oss-security] 20130517 Xen Security Advisory 56 (CVE-2013-2072) - Buffer overflow in xencontrol Python bindings affecting xend  View
195231 38184 CVE-2013-2072 59982  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
22343 JVNDB-2013-003918 Xen の xc_vcpu_setaffinity コール用 Python バインディングにおけるバッファオーバーフローの脆弱性 Xen の xc_vcpu_setaffinity コール用 Python バインディングには、バッファオーバーフローの脆弱性が存在します。 CVE-2013-2072 62014 CVE-2013-2072 38184 7.4 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-003918.html 2013-05-17 2013-08-30 View