CVE-2013-4554

Description (CNA)

Xen 3.0.3 through 4.1.x (possibly 4.1.6.1), 4.2.x (possibly 4.2.3), and 4.3.x (possibly 4.3.1) does not properly prevent access to hypercalls, which allows local guest users to gain privileges via a crafted application running in ring 1 or 2.

Affected (CNA)

CWE

No CWE identifiers supplied.

References

• http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html
• http://rhn.redhat.com/errata/RHSA-2014-0285.html
• http://security.gentoo.org/glsa/glsa-201407-03.xml
• http://www.openwall.com/lists/oss-security/2013/11/26/9
• http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00010.html
• http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html
• http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00015.html
• http://lists.opensuse.org/opensuse-updates/2013-12/msg00059.html

ADP enrichment