| ID |
CVE-2013-0154
|
| Summary |
The get_page_type function in xen/arch/x86/mm.c in Xen 4.2, when debugging is enabled, allows local PV or HVM guest administrators to cause a denial of service (assertion failure and hypervisor crash) via unspecified vectors related to a hypercall. |
| References |
|
| Vulnerable Configurations |
|
| CVSS |
| Base: | 1.9 (as of 29-08-2017 - 01:32) |
| Impact: | |
| Exploitability: | |
|
| CWE |
NVD-CWE-noinfo |
| CAPEC |
|
| Access |
| Vector | Complexity | Authentication |
| LOCAL |
MEDIUM |
NONE |
|
| Impact |
| Confidentiality | Integrity | Availability |
| NONE |
NONE |
PARTIAL |
|
| cvss-vector
via4
|
AV:L/AC:M/Au:N/C:N/I:N/A:P
|
| refmap
via4
|
| bid | 57159 | | confirm | http://seclists.org/oss-sec/2013/q1/att-17/xsa37-4_2.patch | | gentoo | GLSA-201309-24 | | mlist | [oss-security] 20130104 Xen Security Advisory 37 (CVE-2013-0154) - Hypervisor crash due to incorrect ASSERT (debug build only) | | osvdb | 88913 | | sectrack | 1027937 | | secunia | 55082 | | suse | - SUSE-SU-2014:0446
- openSUSE-SU-2013:0636
- openSUSE-SU-2013:0637
| | xf | xen-hypercall-dos(80977) |
|
| Last major update |
29-08-2017 - 01:32 |
| Published |
12-01-2013 - 04:33 |
| Last modified |
29-08-2017 - 01:32 |
