Vulnetix
Try Vulnetix Request Demo
CVE-2013-4370 PUBLISHED CVSS 4.599999904632568 MEDIUM

The ocaml binding for the xc_vcpu_getaffinity function in Xen 4.2.x and 4.3.x frees certain memory that may still be intended for use, which allows local users to cause a denial of service (heap corruption and crash) and possibly execute arbitrary code via unspecified vectors that trigger a (1) use-after-free or (2) double free.

EPSS 0.09% · 24.8th percentile

Risk Scores

CVSS v2.0
4.599999904632568
EPSS Score
0.09%
24.8th percentile

Affected Products

VendorProductVersions
xenxen4.2.0, 4.2.1, 4.2.2
n/an/an/a

Timeline

References

Open in Interactive Console →