The xlu_vif_parse_rate function in the libxlu library in Xen 4.2.x and 4.3.x allows local users to cause a denial of service (NULL pointer dereference) by using the @ character as the VIF rate configuration.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Xen | Xen | 4.2.0 (including) | 4.2.0 (including) |
| Xen | Xen | 4.2.1 (including) | 4.2.1 (including) |
| Xen | Xen | 4.2.2 (including) | 4.2.2 (including) |
| Xen | Xen | 4.2.3 (including) | 4.2.3 (including) |
| Xen | Xen | 4.3.0 (including) | 4.3.0 (including) |
| Xen | Ubuntu | devel | * |
| Xen | Ubuntu | raring | * |
| Xen | Ubuntu | saucy | * |
| Xen-3.3 | Ubuntu | upstream | * |
References
- http://security.gentoo.org/glsa/glsa-201407-03.xml
- http://www.openwall.com/lists/oss-security/2013/10/10/11
- https://exchange.xforce.ibmcloud.com/vulnerabilities/87798
- http://security.gentoo.org/glsa/glsa-201407-03.xml
- http://www.openwall.com/lists/oss-security/2013/10/10/11
- https://exchange.xforce.ibmcloud.com/vulnerabilities/87798