QwikSec

Security Database

CVE

CWE

Training

CVE-2013-1920

Published: Apr 12, 2013

Modified: Aug 6, 2024

PUBLISHED

Description

Xen 4.2.x, 4.1.x, and earlier, when the hypervisor is running "under memory pressure" and the Xen Security Module (XSM) is enabled, uses the wrong ordering of operations when extending the per-domain event channel tracking table, which causes a use-after-free and allows local guest kernels to inject arbitrary events and gain privileges via unspecified vectors.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

SUSE-SU-2014:0470

vendor-advisory

x_refsource_SUSE

third-party-advisory

x_refsource_SECUNIA

vendor-advisory

x_refsource_GENTOO

[Xen-announce] 20130404 Xen Security Advisory 47 (CVE-2013-1920) - Potential use of freed memory in event channel operations

mailing-list

x_refsource_MLIST

vdb-entry

x_refsource_OSVDB

xen-cve20131920-code-exec(83226)

vdb-entry

x_refsource_XF

openSUSE-SU-2013:0912

vendor-advisory

x_refsource_SUSE

third-party-advisory

x_refsource_SECUNIA

vdb-entry

x_refsource_BID

SUSE-SU-2014:0446

vendor-advisory

x_refsource_SUSE

SUSE-SU-2014:0411

vendor-advisory

x_refsource_SUSE

vdb-entry

x_refsource_SECTRACK

[oss-security] 20130404 Xen Security Advisory 47 (CVE-2013-1920) - Potential use of freed memory in event channel operations

mailing-list

x_refsource_MLIST

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.