CVE-2013-6457 - CERT CVE
ID CVE-2013-6457
Sažetak The libxlDomainGetNumaParameters function in the libxl driver (libxl/libxl_driver.c) in libvirt before 1.2.1 does not properly initialize the nodemap, which allows local users to cause a denial of service (invalid free operation and crash) or possibly execute arbitrary code via an inactive domain to the virsh numatune command.
Reference
CVSS
Base: 5.2
Impact: 6.4
Exploitability:5.1
Pristup
VektorSloženostAutentikacija
ADJACENT_NETWORK LOW SINGLE
Impact
PovjerljivostCjelovitostDostupnost
PARTIAL PARTIAL PARTIAL
CVSS vektor AV:A/AC:L/Au:S/C:P/I:P/A:P
Zadnje važnije ažuriranje 03-01-2015 - 02:21
Objavljeno 24-01-2014 - 18:55