CVE-2013-4554

Description

Xen 3.0.3 through 4.1.x (possibly 4.1.6.1), 4.2.x (possibly 4.2.3), and 4.3.x (possibly 4.3.1) does not properly prevent access to hypercalls, which allows local guest users to gain privileges via a crafted application running in ring 1 or 2.

References

http://www.openwall.com/lists/oss-security/2013/11/26/9

http://security.gentoo.org/glsa/glsa-201407-03.xml

http://rhn.redhat.com/errata/RHSA-2014-0285.html

http://lists.opensuse.org/opensuse-updates/2013-12/msg00059.html

http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html

http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html

http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00015.html

http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00010.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3