Xen CVE-2013-4371 Use After Free Remote Denial of Service Vulnerability
BID:62932
Info
Xen CVE-2013-4371 Use After Free Remote Denial of Service Vulnerability
| Bugtraq ID: | 62932 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2013-4371 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 10 2013 12:00AM |
| Updated: | Apr 13 2015 10:22PM |
| Credit: | Coverity Scan and Matthew Daley |
| Vulnerable: |
Xen Xen 4.3 Xen Xen 4.2 SuSE SUSE Linux Enterprise Software Development Kit 11 SP3 SuSE SUSE Linux Enterprise Server 11 SP3 SuSE Suse Linux Enterprise Desktop 11 SP3 Gentoo Linux CentOS Xen4CentOS 0 |
| Not Vulnerable: | |
Solution / Fix
Xen CVE-2013-4371 Use After Free Remote Denial of Service Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Xen CVE-2013-4371 Use After Free Remote Denial of Service Vulnerability
References:
References:
- PATCH] libxl: fix out-of-memory error handling in libxl_list_cpupool (Matthew Daley)
- Xen Project Homepage (Xen Project)
- Xen Security Advisory 70 - use-after-free in libxl_list_cpupool under memory pre (oss-sec)