Main Vulnerability Database SB2013021305

SB2013021305 - Denial of service in Xen

Published: February 13, 2013 Updated: August 2, 2020

Security Bulletin ID SB2013021305

Severity

Medium

Patch available

YES

Number of vulnerabilities 1

Exploitation vector Local access

Highest impact Denial of service

Breakdown by Severity

Low
Medium
High
Critical

Description

This security bulletin contains information about 1 security vulnerability.

1) Buffer overflow (CVE-ID: CVE-2013-0231)

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The pciback_enable_msi function in the PCI backend driver (drivers/xen/pciback/conf_space_capability_msi.c) in Xen for the Linux kernel 2.6.18 and 3.8 allows guest OS users with PCI device access to cause a denial of service via a large number of kernel log messages

Remediation

Install update from vendor's website.

References

http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00004.html
http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00018.html
http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html
http://osvdb.org/89903
http://secunia.com/advisories/52059
http://www.debian.org/security/2013/dsa-2632
http://www.openwall.com/lists/oss-security/2013/02/05/9
http://www.securityfocus.com/bid/57740
https://exchange.xforce.ibmcloud.com/vulnerabilities/81923