CVE-2013-4494
02.11.2013, 18:55
Xen before 4.1.x, 4.2.x, and 4.3.x does not take the page_alloc_lock and grant_table.lock in the same order, which allows local guest administrators with access to multiple vcpus to cause a denial of service (host deadlock) via unspecified vectors.Enginsight
| Vendor | Product | Version |
|---|---|---|
| xen | xen | 4.1.0 ≤ 𝑥 ≤ 4.1.6.1 |
| xen | xen | 4.2.0 ≤ 𝑥 ≤ 4.2.5 |
| xen | xen | 4.3.0 ≤ 𝑥 ≤ 4.3.4 |
| debian | debian_linux | 7.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References