Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2014-1950

Опубликовано: 14 фев. 2014
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 4.6

Описание

Use-after-free vulnerability in the xc_cpupool_getinfo function in Xen 4.1.x through 4.3.x, when using a multithreaded toolstack, does not properly handle a failure by the xc_cpumap_alloc function, which allows local users with access to management functions to cause a denial of service (heap corruption) and possibly gain privileges via unspecified vectors.

РелизСтатусПримечание
devel

released

4.3.0-1ubuntu5
lucid

DNE

precise

released

4.1.5-0ubuntu0.12.04.3
quantal

released

4.1.5-0ubuntu0.12.10.3
saucy

released

4.3.0-1ubuntu1.3
upstream

needs-triage

Показывать по

РелизСтатусПримечание
devel

DNE

lucid

not-affected

precise

DNE

quantal

DNE

saucy

DNE

upstream

ignored

end of life

Показывать по

EPSS

Процентиль: 24%
0.00083
Низкий

4.6 Medium

CVSS2

Связанные уязвимости

redhat
почти 12 лет назад

Use-after-free vulnerability in the xc_cpupool_getinfo function in Xen 4.1.x through 4.3.x, when using a multithreaded toolstack, does not properly handle a failure by the xc_cpumap_alloc function, which allows local users with access to management functions to cause a denial of service (heap corruption) and possibly gain privileges via unspecified vectors.

nvd
почти 12 лет назад

Use-after-free vulnerability in the xc_cpupool_getinfo function in Xen 4.1.x through 4.3.x, when using a multithreaded toolstack, does not properly handle a failure by the xc_cpumap_alloc function, which allows local users with access to management functions to cause a denial of service (heap corruption) and possibly gain privileges via unspecified vectors.

debian
почти 12 лет назад

Use-after-free vulnerability in the xc_cpupool_getinfo function in Xen ...

github
больше 3 лет назад

Use-after-free vulnerability in the xc_cpupool_getinfo function in Xen 4.1.x through 4.3.x, when using a multithreaded toolstack, does not properly handle a failure by the xc_cpumap_alloc function, which allows local users with access to management functions to cause a denial of service (heap corruption) and possibly gain privileges via unspecified vectors.

EPSS

Процентиль: 24%
0.00083
Низкий

4.6 Medium

CVSS2