Published: 13/02/2013 Updated: 29/08/2017

CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9

VMScore: 436

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C

The pciback_enable_msi function in the PCI backend driver (drivers/xen/pciback/conf_space_capability_msi.c) in Xen for the Linux kernel 2.6.18 and 3.8 allows guest OS users with PCI device access to cause a denial of service via a large number of kernel log messages. NOTE: some of these details are obtained from third party information.

Vulnerable Product	Search on Vulmon	Subscribe to Product
xen xen 3.0.4
xen xen 3.0.2
xen xen 3.2.0
xen xen 3.1.3
xen xen 3.2.3
xen xen 3.0.3
xen xen 3.1.4
linux linux kernel 2.6.18
linux linux kernel 3.8
xen xen 3.2.1
xen xen 3.2.2

Synopsis Moderate: kernel security and bug fix update Type/Severity Security Advisory: Moderate Topic Updated kernel packages that fix several security issues and three bugs arenow available for Red Hat Enterprise Linux 5The Red Hat Security Response Team has rated this update as having moderatesecurity im ...

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2013-0231 Jan Beulich provided a fix for an issue in the Xen PCI backend drivers Users of guests on a system using passed-thr ...

Several security issues were fixed in the kernel ...

CWE-119 http://secunia.com/advisories/52059 http://osvdb.org/89903 http://www.openwall.com/lists/oss-security/2013/02/05/9 http://www.securityfocus.com/bid/57740 http://www.debian.org/security/2013/dsa-2632 http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00004.html http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00018.html http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html https://exchange.xforce.ibmcloud.com/vulnerabilities/81923 https://access.redhat.com/errata/RHSA-2013:0747 https://nvd.nist.gov https://usn.ubuntu.com/1769-1/https://www.debian.org/security/./dsa-2632

CVE-2013-0231

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect