The xenlight library (libxl) in Xen 4.0.x through 4.2.x, when IOMMU is disabled, provides access to a busmastering-capable PCI passthrough device before the IOMMU setup is complete, which allows local HVM guest domains to gain privileges or cause a denial of service via a DMA instruction.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2013-09-12 11:37
Updated : 2017-01-06 18:59
NVD link : CVE-2013-4329
Mitre link : CVE-2013-4329
JSON object : View
CWE
CWE-264
Permissions, Privileges, and Access Controls
Products Affected
xen
- xen