Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2013-2072
HistoryAug 28, 2013 - 9:55 p.m.

CVE-2013-2072

2013-08-2821:55:08
CWE-119
[email protected]
web.nvd.nist.gov
35
cve-2013-2072
buffer overflow
python bindings
xen 4.0.x
xen 4.1.x
xen 4.2.x
local administrators
vcpu affinity
denial of service
memory corruption
xend toolstack crash
privilege escalation
crafted cpumap
nvd

7.4 High

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:M/Au:S/C:C/I:C/A:C

4.3 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.9%

JSON

Buffer overflow in the Python bindings for the xc_vcpu_setaffinity call in Xen 4.0.x, 4.1.x, and 4.2.x allows local administrators with permissions to configure VCPU affinity to cause a denial of service (memory corruption and xend toolstack crash) and possibly gain privileges via a crafted cpumap.

Affected configurations

NVD
Node
xenxenMatch4.1.0
OR
xenxenMatch4.1.1
OR
xenxenMatch4.1.2
OR
xenxenMatch4.1.3
OR
xenxenMatch4.1.4
OR
xenxenMatch4.1.5
Node
xenxenMatch4.2.0
OR
xenxenMatch4.2.1
OR
xenxenMatch4.2.2
Node
debiandebian_linuxMatch7.0
Node
xenxenMatch4.0.0
OR
xenxenMatch4.0.1
OR
xenxenMatch4.0.2
OR
xenxenMatch4.0.3
OR
xenxenMatch4.0.4

Related

debiancve 1
nessus 11
ubuntucve 1
nvd 1
fedora 21
prion 1
cvelist 1
xen 1
openvas 44
debian 1
securityvulns 2
osv 1
suse 2
mageia 1
debiancve
debiancve
CVE-2013-2072
2013-08-28 21:55:08
nessus
nessus
OracleVM 3.2 : xen (OVMSA-2013-0040)
2014-11-26 00:00:00
Fedora 18 : xen-4.2.2-5.fc18 (2013-8590)
2013-05-28 00:00:00
Fedora 17 : xen-4.1.5-4.fc17 (2013-8571)
2013-05-28 00:00:00
ubuntucve
ubuntucve
CVE-2013-2072
2013-08-28 00:00:00
nvd
nvd
CVE-2013-2072
2013-08-28 21:55:08
fedora
fedora
[SECURITY] Fedora 19 Update: xen-4.2.2-5.fc19
2013-05-27 03:26:42
[SECURITY] Fedora 18 Update: xen-4.2.2-5.fc18
2013-05-27 00:30:35
[SECURITY] Fedora 18 Update: xen-4.2.2-6.fc18
2013-06-14 02:28:52
prion
prion
Buffer overflow
2013-08-28 21:55:00
cvelist
cvelist
CVE-2013-2072
2013-08-28 17:00:00
xen
xen
Buffer overflow in xencontrol Python bindings affecting xend
2013-05-17 12:00:00
openvas
openvas
Debian Security Advisory DSA 3041-1 (xen - security update)
2014-10-01 00:00:00
Debian: Security Advisory (DSA-3041-1)
2014-09-30 00:00:00
Mageia: Security Advisory (MGASA-2013-0197)
2022-01-28 00:00:00
debian
debian
[SECURITY] [DSA 3041-1] xen security update
2014-10-01 12:22:02
securityvulns
securityvulns
[SECURITY] [DSA 3041-1] xen security update
2014-10-14 00:00:00
Xen multiple security vulnerabilities
2014-10-14 00:00:00
osv
osv
xen - security update
2014-10-01 00:00:00
suse
suse
Security update for Xen (important)
2013-06-25 19:04:17
Security update for Xen (important)
2014-03-25 23:04:15
mageia
mageia
Updated xen package fixes security issues
2013-07-01 23:17:22

7.4 High

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:M/Au:S/C:C/I:C/A:C

4.3 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.9%

JSON
Related for CVE-2013-2072
debiancve1nessus11ubuntucve1nvd1fedora21prion1cvelist1xen1openvas44debian1securityvulns2osv1suse2mageia1