NVD

Id
40145  
Name
CVE-2013-4553  
Description
The XEN_DOMCTL_getmemlist hypercall in Xen 3.4.x through 4.3.x (possibly 4.3.1) does not always obtain the page_alloc_lock and mm_rwlock in the same order, which allows local guest administrators to cause a denial of service (host deadlock).  
Reject
 
CVSS Version
2  
CVSS Score
5.2  
Severity
Medium  
CVSS Base Score
5.2  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
4.4  
CVSS Vector
(AV:A/AC:M/Au:S/C:N/I:N/A:C)  
Pub Date
2017-01-18  
Published
2013-12-24  
Modified Date
2017-01-06  
Seq
2013-4553  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
204296 40145 CVE-2013-4553 SUSE-SU-2014:0372  View
204297 40145 CVE-2013-4553 SUSE-SU-2014:0446  View
204298 40145 CVE-2013-4553 openSUSE-SU-2013:1876  View
204299 40145 CVE-2013-4553 GLSA-201407-03  View
204300 40145 CVE-2013-4553 DSA-3006  View
204301 40145 CVE-2013-4553 [oss-security] 20131126 Xen Security Advisory 74 (CVE-2013-4553) - Lock order reversal between page_alloc_lock and mm_rwlock  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24143 JVNDB-2013-005718 Xen の XEN_DOMCTL_getmemlist hypercall におけるサービス運用妨害 (DoS) の脆弱性 Xen の XEN_DOMCTL_getmemlist hypercall は、page_alloc_lock および mm_rwlock を同じ順番で取得しないため、サービス運用妨害 (ホストデッドロック) 状態にされる脆弱性が存在します。 CVE-2013-4553 64495 CVE-2013-4553 40145 5.2 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005718.html 2013-11-26 2013-12-27 View