NetSight
IP …
medium5.2

CVE-2013-4554

Xen 3.0.3 through 4.1.x (possibly 4.1.6.1), 4.2.x (possibly 4.2.3), and 4.3.x (possibly 4.3.1) does not properly prevent access to hypercalls, which allows loc…

Impact

Xen 3.0.3 through 4.1.x (possibly 4.1.6.1), 4.2.x (possibly 4.2.3), and 4.3.x (possibly 4.3.1) does not properly prevent access to hypercalls, which allows local guest users to gain privileges via a crafted application running in ring 1 or 2.

Affected products

VendorProductAffected versions
XenXen
Versions 3.0.3, 3.0.4, 3.1.3, 3.1.4, 3.2.0, 3.2.1

Weakness classification

CWE-264

References