CVE-2013-2072

Buffer overflow in the Python bindings for the xc_vcpu_setaffinity call in Xen 4.0.x, 4.1.x, and 4.2.x allows local administrators with permissions to configure VCPU affinity to cause a denial of service (memory corruption and xend toolstack crash) and possibly gain privileges via a crafted cpumap.

CVSS v2.0

7.4 HIGHAV:A/AC:M/Au:S/C:C/I:C/A:C

EPSS

1.06% chance of exploitation in the next 30 days, 62th percentile

Published

2013-08-28

Updated

2024-08-06

Proof-of-concept exploits (1)

• bl4ck5un/cve-2013-20720★ · 2014-04-07

References

• CVE Record
• NVD entry

Related

• CVE-2013-4348
• CVE-2013-6375
• CVE-2013-2068
• CVE-2013-2088
• CVE-2013-2050
• CVE-2013-2094