Buffer overflow in Xen

CVE-2013-4370

The ocaml binding for the xc_vcpu_getaffinity function in Xen 4.2.x and 4.3.x frees certain memory that may still be intended for use, which allows local users to cause a denial of service (heap corruption and crash) and possibly execute arbitrary code via unspecified vectors that trigger a (1) use-after-free or (2) double free.

Vulnerability class: Buffer Overflow

EPSS: 0.004 (35.2th percentile) — read the EPSS interpretation.

Affected products

Xen — versions 4.2.0, 4.2.1, 4.2.2
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

secalert@redhat.com (x_refsource_MISC)
secalert@redhat.com (vendor-advisory, x_refsource_GENTOO)
secalert@redhat.com (mailing-list, x_refsource_MLIST)