NVD

Id
40092  
Name
CVE-2013-4494  
Description
Xen before 4.1.x, 4.2.x, and 4.3.x does not take the page_alloc_lock and grant_table.lock in the same order, which allows local guest administrators with access to multiple vcpus to cause a denial of service (host deadlock) via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
5.2  
Severity
Medium  
CVSS Base Score
5.2  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
4.4  
CVSS Vector
(AV:A/AC:M/Au:S/C:N/I:N/A:C)  
Pub Date
2017-01-18  
Published
2013-11-02  
Modified Date
2017-01-06  
Seq
2013-4494  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
203985 40092 CVE-2013-4494 SUSE-SU-2014:0411  View
203986 40092 CVE-2013-4494 SUSE-SU-2014:0446  View
203987 40092 CVE-2013-4494 SUSE-SU-2014:0470  View
203988 40092 CVE-2013-4494 openSUSE-SU-2013:1876  View
203989 40092 CVE-2013-4494 RHSA-2014:0108  View
203990 40092 CVE-2013-4494 GLSA-201407-03  View
203991 40092 CVE-2013-4494 DSA-3006  View
203992 40092 CVE-2013-4494 [oss-security] 20131101 Xen Security Advisory 73 - Lock order reversal between page allocation and grant table locks  View
203993 40092 CVE-2013-4494 [oss-security] 20131101 Re: Xen Security Advisory 73 - Lock order reversal between page allocation and grant table locks  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
23405 JVNDB-2013-004980 Xen におけるサービス運用妨害 (DoS) の脆弱性 Xen は、page_alloc_lock と grant_table.lock を同じ順序でロックしないため、サービス運用妨害 (ホストのデッドロック) 状態にされる脆弱性が存在します。 CVE-2013-4494 64436 CVE-2013-4494 40092 5.2 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004980.html 2013-11-01 2013-11-28 View