NetSight
IP …
medium5.2

CVE-2013-4494

Xen before 4.1.x, 4.2.x, and 4.3.x does not take the page_alloc_lock and grant_table.lock in the same order, which allows local guest administrators with acces…

Impact

Xen before 4.1.x, 4.2.x, and 4.3.x does not take the page_alloc_lock and grant_table.lock in the same order, which allows local guest administrators with access to multiple vcpus to cause a denial of service (host deadlock) via unspecified vectors.

Affected products

VendorProductAffected versions
XenXen
from 4.1.0 through 4.1.6.1
from 4.2.0 through 4.2.5
from 4.3.0 through 4.3.4
DebianDebian Linux
Version 7.0

Weakness classification

CWE-20

References