1. Home
  2. CVE Database
  3. CVE-2013-1920
MEDIUM · 4.4

CVE-2013-1920

Xen 4.2.x, 4.1.x, and earlier, when the hypervisor is running "under memory pressure" and the Xen Security Module (XSM) is enabled, uses the wrong ordering of operations when extending the per-domain ...

Vulnerability Description

Xen 4.2.x, 4.1.x, and earlier, when the hypervisor is running "under memory pressure" and the Xen Security Module (XSM) is enabled, uses the wrong ordering of operations when extending the per-domain event channel tracking table, which causes a use-after-free and allows local guest kernels to inject arbitrary events and gain privileges via unspecified vectors.

CVSS Score

4.4

MEDIUM

AV:L/AC:M/Au:N/C:P/I:P/A:P
Confidentiality
PARTIAL
Integrity
PARTIAL
Availability
PARTIAL

Affected Products

VendorProductVersions
XenXen3.0.2

Related Weaknesses (CWE)

CWE-264

References

FAQ

What is CVE-2013-1920?

CVE-2013-1920 is a vulnerability with a CVSS score of 4.4 (MEDIUM). Xen 4.2.x, 4.1.x, and earlier, when the hypervisor is running "under memory pressure" and the Xen Security Module (XSM) is enabled, uses the wrong ordering of operations when extending the per-domain ...

How severe is CVE-2013-1920?

CVE-2013-1920 has been rated MEDIUM with a CVSS base score of 4.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2013-1920?

Check the references section above for vendor advisories and patch information. Affected products include: Xen Xen.