Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2013-4356

Опубликовано: 30 сент. 2013
Источник: redhat
CVSS2: 1
EPSS Низкий

Описание

Xen 4.3.x writes hypervisor mappings to certain shadow pagetables when live migration is performed on hosts with more than 5TB of RAM, which allows local 64-bit PV guests to read or write to invalid memory and cause a denial of service (crash).

Отчет

This issue does not affect the versions of the kernel-xen package as shipped with Red Hat Enterprise Linux 5. This issue does not affect the versions of the Linux kernel package as shipped with Red Hat Enterprise Linux 6 and Red Hat Enterprise MRG as it does not have support for Xen hypervisor.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5kernel-xenNot affected

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-401
https://bugzilla.redhat.com/show_bug.cgi?id=1009553Kernel: Xen: Xsa-64: memory leak by 64bit PV guests under live migration

EPSS

Процентиль: 27%
0.00094
Низкий

1 Low

CVSS2

Связанные уязвимости

ubuntu
больше 12 лет назад

Xen 4.3.x writes hypervisor mappings to certain shadow pagetables when live migration is performed on hosts with more than 5TB of RAM, which allows local 64-bit PV guests to read or write to invalid memory and cause a denial of service (crash).

nvd
больше 12 лет назад

Xen 4.3.x writes hypervisor mappings to certain shadow pagetables when live migration is performed on hosts with more than 5TB of RAM, which allows local 64-bit PV guests to read or write to invalid memory and cause a denial of service (crash).

debian
больше 12 лет назад

Xen 4.3.x writes hypervisor mappings to certain shadow pagetables when ...

github
больше 3 лет назад

Xen 4.3.x writes hypervisor mappings to certain shadow pagetables when live migration is performed on hosts with more than 5TB of RAM, which allows local 64-bit PV guests to read or write to invalid memory and cause a denial of service (crash).

EPSS

Процентиль: 27%
0.00094
Низкий

1 Low

CVSS2

Уязвимость CVE-2013-4356