Xen CVE-2013-1964 Local Denial of Service Vulnerability

Bugtraq ID:	59293
Class:	Unknown
CVE:	CVE-2013-1964
Remote:	No
Local:	Yes
Published:	Apr 18 2013 12:00AM
Updated:	Apr 13 2015 09:26PM
Credit:	Reported in xen-devel mailing list.
Vulnerable:	Xen Xen 4.1 Xen Xen 4.0 SuSE SUSE Linux Enterprise Server for VMware 11 SP2 + Linux kernel 2.6.5 SuSE SUSE Linux Enterprise Server 11 SP2 + Linux kernel 2.6.5 SuSE SUSE Linux Enterprise Server 11 SP1 LTSS + Linux kernel 2.6.5 + Linux kernel 2.6.5 SuSE SUSE Linux Enterprise SDK 11 SP2 SuSE Suse Linux Enterprise Desktop 11 SP2 + Linux kernel 2.6.5 S.u.S.E. openSUSE 12.2 Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 Citrix XenServer 6.1 Citrix XenServer 6.0 Citrix XenServer 5.6 Citrix XenServer 5.5 Citrix XenServer 5.0
Not Vulnerable:

Xen CVE-2013-1964 Local Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Xen CVE-2013-1964 Local Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Xen CVE-2013-1964 Local Denial of Service Vulnerability

References:

• [Xen-announce] Xen Security Advisory 50 (CVE-2013-1964) - grant table hypercall (Xen)
  
• Citrix XenServer Multiple Security Updates (Citrix)
  
• Xen Project Homepage (Xen Project)
  
• Xen Security Advisory 50 (CVE-2013-1964) - grant table hypercall acquire/releas (Xen Project)