CVE-2013-1920 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2013-1920 Interim 1 19 2023-12-08T02:41:25Z current 2021-05-30T13:10:59Z 2023-12-08T02:41:25Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2013-1920 Xen 4.2.x, 4.1.x, and earlier, when the hypervisor is running "under memory pressure" and the Xen Security Module (XSM) is enabled, uses the wrong ordering of operations when extending the per-domain event channel tracking table, which causes a use-after-free and allows local guest kernels to inject arbitrary events and gain privileges via unspecified vectors. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2013-June/000495.html E-Mail link for SUSE-SU-2013:1075-1 https://lists.suse.com/pipermail/sle-security-updates/2014-March/000757.html E-Mail link for SUSE-SU-2014:0411-1 https://lists.suse.com/pipermail/sle-security-updates/2014-March/000765.html E-Mail link for SUSE-SU-2014:0446-1 https://lists.suse.com/pipermail/sle-security-updates/2014-April/000776.html E-Mail link for SUSE-SU-2014:0470-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Point of Service 11 SP3 SUSE Linux Enterprise Server 11 SP1-LTSS SUSE Linux Enterprise Server 11 SP1-TERADATA SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP4 xen xen-4.0.3_21548_14-0.5.1 xen-4.0.3_21548_16-0.5.1 xen-4.1.5_02-0.5.1 xen-4.2.2_04-0.7.5 xen-4.4.2_08-1.7 xen-devel-4.1.5_02-0.5.1 xen-devel-4.4.2_08-1.7 xen-doc-html-4.0.3_21548_14-0.5.1 xen-doc-html-4.0.3_21548_16-0.5.1 xen-doc-html-4.1.5_02-0.5.1 xen-doc-html-4.2.2_04-0.7.5 xen-doc-html-4.4.2_08-1.7 xen-doc-pdf-4.0.3_21548_14-0.5.1 xen-doc-pdf-4.0.3_21548_16-0.5.1 xen-doc-pdf-4.1.5_02-0.5.1 xen-doc-pdf-4.2.2_04-0.7.5 xen-kmp-default-4.0.3_21548_14_2.6.32.54_0.31.TDC-0.5.1 xen-kmp-default-4.0.3_21548_16_2.6.32.59_0.9-0.5.1 xen-kmp-default-4.1.5_02_3.0.74_0.6.10-0.5.1 xen-kmp-default-4.2.2_04_3.0.76_0.11-0.7.5 xen-kmp-default-4.4.2_08_3.0.101_63-1.7 xen-kmp-pae-4.0.3_21548_16_2.6.32.59_0.9-0.5.1 xen-kmp-pae-4.1.5_02_3.0.74_0.6.10-0.5.1 xen-kmp-pae-4.2.2_04_3.0.76_0.11-0.7.5 xen-kmp-pae-4.4.2_08_3.0.101_63-1.7 xen-kmp-trace-4.0.3_21548_14_2.6.32.54_0.31.TDC-0.5.1 xen-kmp-trace-4.0.3_21548_16_2.6.32.59_0.9-0.5.1 xen-kmp-trace-4.1.5_02_3.0.74_0.6.10-0.5.1 xen-libs-32bit-4.1.5_02-0.5.1 xen-libs-32bit-4.2.2_04-0.7.5 xen-libs-32bit-4.4.2_08-1.7 xen-libs-4.0.3_21548_14-0.5.1 xen-libs-4.0.3_21548_16-0.5.1 xen-libs-4.1.5_02-0.5.1 xen-libs-4.2.2_04-0.7.5 xen-libs-4.4.2_08-1.7 xen-tools-4.0.3_21548_14-0.5.1 xen-tools-4.0.3_21548_16-0.5.1 xen-tools-4.1.5_02-0.5.1 xen-tools-4.2.2_04-0.7.5 xen-tools-4.4.2_08-1.7 xen-tools-domU-4.0.3_21548_14-0.5.1 xen-tools-domU-4.0.3_21548_16-0.5.1 xen-tools-domU-4.1.5_02-0.5.1 xen-tools-domU-4.2.2_04-0.7.5 xen-tools-domU-4.4.2_08-1.7 xen-4.1.5_02-0.5.1 as a component of SUSE Linux Enterprise Desktop 11 SP2 xen-doc-html-4.1.5_02-0.5.1 as a component of SUSE Linux Enterprise Desktop 11 SP2 xen-doc-pdf-4.1.5_02-0.5.1 as a component of SUSE Linux Enterprise Desktop 11 SP2 xen-kmp-default-4.1.5_02_3.0.74_0.6.10-0.5.1 as a component of SUSE Linux Enterprise Desktop 11 SP2 xen-kmp-pae-4.1.5_02_3.0.74_0.6.10-0.5.1 as a component of SUSE Linux Enterprise Desktop 11 SP2 xen-kmp-trace-4.1.5_02_3.0.74_0.6.10-0.5.1 as a component of SUSE Linux Enterprise Desktop 11 SP2 xen-libs-4.1.5_02-0.5.1 as a component of SUSE Linux Enterprise Desktop 11 SP2 xen-libs-32bit-4.1.5_02-0.5.1 as a component of SUSE Linux Enterprise Desktop 11 SP2 xen-tools-4.1.5_02-0.5.1 as a component of SUSE Linux Enterprise Desktop 11 SP2 xen-tools-domU-4.1.5_02-0.5.1 as a component of SUSE Linux Enterprise Desktop 11 SP2 xen-4.0.3_21548_16-0.5.1 as a component of SUSE Linux Enterprise Server 11 SP1-LTSS xen-doc-html-4.0.3_21548_16-0.5.1 as a component of SUSE Linux Enterprise Server 11 SP1-LTSS xen-doc-pdf-4.0.3_21548_16-0.5.1 as a component of SUSE Linux Enterprise Server 11 SP1-LTSS xen-kmp-default-4.0.3_21548_16_2.6.32.59_0.9-0.5.1 as a component of SUSE Linux Enterprise Server 11 SP1-LTSS xen-kmp-pae-4.0.3_21548_16_2.6.32.59_0.9-0.5.1 as a component of SUSE Linux Enterprise Server 11 SP1-LTSS xen-kmp-trace-4.0.3_21548_16_2.6.32.59_0.9-0.5.1 as a component of SUSE Linux Enterprise Server 11 SP1-LTSS xen-libs-4.0.3_21548_16-0.5.1 as a component of SUSE Linux Enterprise Server 11 SP1-LTSS xen-tools-4.0.3_21548_16-0.5.1 as a component of SUSE Linux Enterprise Server 11 SP1-LTSS xen-tools-domU-4.0.3_21548_16-0.5.1 as a component of SUSE Linux Enterprise Server 11 SP1-LTSS xen-4.0.3_21548_14-0.5.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA xen-doc-html-4.0.3_21548_14-0.5.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA xen-doc-pdf-4.0.3_21548_14-0.5.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA xen-kmp-default-4.0.3_21548_14_2.6.32.54_0.31.TDC-0.5.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA xen-kmp-trace-4.0.3_21548_14_2.6.32.54_0.31.TDC-0.5.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA xen-libs-4.0.3_21548_14-0.5.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA xen-tools-4.0.3_21548_14-0.5.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA xen-tools-domU-4.0.3_21548_14-0.5.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA xen-4.1.5_02-0.5.1 as a component of SUSE Linux Enterprise Server 11 SP2 xen-doc-html-4.1.5_02-0.5.1 as a component of SUSE Linux Enterprise Server 11 SP2 xen-doc-pdf-4.1.5_02-0.5.1 as a component of SUSE Linux Enterprise Server 11 SP2 xen-kmp-default-4.1.5_02_3.0.74_0.6.10-0.5.1 as a component of SUSE Linux Enterprise Server 11 SP2 xen-kmp-pae-4.1.5_02_3.0.74_0.6.10-0.5.1 as a component of SUSE Linux Enterprise Server 11 SP2 xen-kmp-trace-4.1.5_02_3.0.74_0.6.10-0.5.1 as a component of SUSE Linux Enterprise Server 11 SP2 xen-libs-4.1.5_02-0.5.1 as a component of SUSE Linux Enterprise Server 11 SP2 xen-libs-32bit-4.1.5_02-0.5.1 as a component of SUSE Linux Enterprise Server 11 SP2 xen-tools-4.1.5_02-0.5.1 as a component of SUSE Linux Enterprise Server 11 SP2 xen-tools-domU-4.1.5_02-0.5.1 as a component of SUSE Linux Enterprise Server 11 SP2 xen-4.2.2_04-0.7.5 as a component of SUSE Linux Enterprise Server 11 SP3 xen-doc-html-4.2.2_04-0.7.5 as a component of SUSE Linux Enterprise Server 11 SP3 xen-doc-pdf-4.2.2_04-0.7.5 as a component of SUSE Linux Enterprise Server 11 SP3 xen-kmp-default-4.2.2_04_3.0.76_0.11-0.7.5 as a component of SUSE Linux Enterprise Server 11 SP3 xen-kmp-pae-4.2.2_04_3.0.76_0.11-0.7.5 as a component of SUSE Linux Enterprise Server 11 SP3 xen-libs-4.2.2_04-0.7.5 as a component of SUSE Linux Enterprise Server 11 SP3 xen-libs-32bit-4.2.2_04-0.7.5 as a component of SUSE Linux Enterprise Server 11 SP3 xen-tools-4.2.2_04-0.7.5 as a component of SUSE Linux Enterprise Server 11 SP3 xen-tools-domU-4.2.2_04-0.7.5 as a component of SUSE Linux Enterprise Server 11 SP3 xen-4.4.2_08-1.7 as a component of SUSE Linux Enterprise Server 11 SP4 xen-doc-html-4.4.2_08-1.7 as a component of SUSE Linux Enterprise Server 11 SP4 xen-kmp-default-4.4.2_08_3.0.101_63-1.7 as a component of SUSE Linux Enterprise Server 11 SP4 xen-kmp-pae-4.4.2_08_3.0.101_63-1.7 as a component of SUSE Linux Enterprise Server 11 SP4 xen-libs-4.4.2_08-1.7 as a component of SUSE Linux Enterprise Server 11 SP4 xen-libs-32bit-4.4.2_08-1.7 as a component of SUSE Linux Enterprise Server 11 SP4 xen-tools-4.4.2_08-1.7 as a component of SUSE Linux Enterprise Server 11 SP4 xen-tools-domU-4.4.2_08-1.7 as a component of SUSE Linux Enterprise Server 11 SP4 xen-4.1.5_02-0.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP2 xen-doc-html-4.1.5_02-0.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP2 xen-doc-pdf-4.1.5_02-0.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP2 xen-kmp-default-4.1.5_02_3.0.74_0.6.10-0.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP2 xen-kmp-pae-4.1.5_02_3.0.74_0.6.10-0.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP2 xen-kmp-trace-4.1.5_02_3.0.74_0.6.10-0.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP2 xen-libs-4.1.5_02-0.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP2 xen-libs-32bit-4.1.5_02-0.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP2 xen-tools-4.1.5_02-0.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP2 xen-tools-domU-4.1.5_02-0.5.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP2 xen-devel-4.1.5_02-0.5.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP2 xen-devel-4.4.2_08-1.7 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 xen as a component of SUSE Linux Enterprise Point of Service 11 SP3 Xen 4.2.x, 4.1.x, and earlier, when the hypervisor is running "under memory pressure" and the Xen Security Module (XSM) is enabled, uses the wrong ordering of operations when extending the per-domain event channel tracking table, which causes a use-after-free and allows local guest kernels to inject arbitrary events and gain privileges via unspecified vectors. CVE-2013-1920 SUSE Linux Enterprise Desktop 11 SP2:xen-4.1.5_02-0.5.1 SUSE Linux Enterprise Desktop 11 SP2:xen-doc-html-4.1.5_02-0.5.1 SUSE Linux Enterprise Desktop 11 SP2:xen-doc-pdf-4.1.5_02-0.5.1 SUSE Linux Enterprise Desktop 11 SP2:xen-kmp-default-4.1.5_02_3.0.74_0.6.10-0.5.1 SUSE Linux Enterprise Desktop 11 SP2:xen-kmp-pae-4.1.5_02_3.0.74_0.6.10-0.5.1 SUSE Linux Enterprise Desktop 11 SP2:xen-kmp-trace-4.1.5_02_3.0.74_0.6.10-0.5.1 SUSE Linux Enterprise Desktop 11 SP2:xen-libs-4.1.5_02-0.5.1 SUSE Linux Enterprise Desktop 11 SP2:xen-libs-32bit-4.1.5_02-0.5.1 SUSE Linux Enterprise Desktop 11 SP2:xen-tools-4.1.5_02-0.5.1 SUSE Linux Enterprise Desktop 11 SP2:xen-tools-domU-4.1.5_02-0.5.1 SUSE Linux Enterprise Server 11 SP1-LTSS:xen-4.0.3_21548_16-0.5.1 SUSE Linux Enterprise Server 11 SP1-LTSS:xen-doc-html-4.0.3_21548_16-0.5.1 SUSE Linux Enterprise Server 11 SP1-LTSS:xen-doc-pdf-4.0.3_21548_16-0.5.1 SUSE Linux Enterprise Server 11 SP1-LTSS:xen-kmp-default-4.0.3_21548_16_2.6.32.59_0.9-0.5.1 SUSE Linux Enterprise Server 11 SP1-LTSS:xen-kmp-pae-4.0.3_21548_16_2.6.32.59_0.9-0.5.1 SUSE Linux Enterprise Server 11 SP1-LTSS:xen-kmp-trace-4.0.3_21548_16_2.6.32.59_0.9-0.5.1 SUSE Linux Enterprise Server 11 SP1-LTSS:xen-libs-4.0.3_21548_16-0.5.1 SUSE Linux Enterprise Server 11 SP1-LTSS:xen-tools-4.0.3_21548_16-0.5.1 SUSE Linux Enterprise Server 11 SP1-LTSS:xen-tools-domU-4.0.3_21548_16-0.5.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:xen-4.0.3_21548_14-0.5.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:xen-doc-html-4.0.3_21548_14-0.5.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:xen-doc-pdf-4.0.3_21548_14-0.5.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:xen-kmp-default-4.0.3_21548_14_2.6.32.54_0.31.TDC-0.5.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:xen-kmp-trace-4.0.3_21548_14_2.6.32.54_0.31.TDC-0.5.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:xen-libs-4.0.3_21548_14-0.5.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:xen-tools-4.0.3_21548_14-0.5.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:xen-tools-domU-4.0.3_21548_14-0.5.1 SUSE Linux Enterprise Server 11 SP2:xen-4.1.5_02-0.5.1 SUSE Linux Enterprise Server 11 SP2:xen-doc-html-4.1.5_02-0.5.1 SUSE Linux Enterprise Server 11 SP2:xen-doc-pdf-4.1.5_02-0.5.1 SUSE Linux Enterprise Server 11 SP2:xen-kmp-default-4.1.5_02_3.0.74_0.6.10-0.5.1 SUSE Linux Enterprise Server 11 SP2:xen-kmp-pae-4.1.5_02_3.0.74_0.6.10-0.5.1 SUSE Linux Enterprise Server 11 SP2:xen-kmp-trace-4.1.5_02_3.0.74_0.6.10-0.5.1 SUSE Linux Enterprise Server 11 SP2:xen-libs-4.1.5_02-0.5.1 SUSE Linux Enterprise Server 11 SP2:xen-libs-32bit-4.1.5_02-0.5.1 SUSE Linux Enterprise Server 11 SP2:xen-tools-4.1.5_02-0.5.1 SUSE Linux Enterprise Server 11 SP2:xen-tools-domU-4.1.5_02-0.5.1 SUSE Linux Enterprise Server 11 SP3:xen-4.2.2_04-0.7.5 SUSE Linux Enterprise Server 11 SP3:xen-doc-html-4.2.2_04-0.7.5 SUSE Linux Enterprise Server 11 SP3:xen-doc-pdf-4.2.2_04-0.7.5 SUSE Linux Enterprise Server 11 SP3:xen-kmp-default-4.2.2_04_3.0.76_0.11-0.7.5 SUSE Linux Enterprise Server 11 SP3:xen-kmp-pae-4.2.2_04_3.0.76_0.11-0.7.5 SUSE Linux Enterprise Server 11 SP3:xen-libs-4.2.2_04-0.7.5 SUSE Linux Enterprise Server 11 SP3:xen-libs-32bit-4.2.2_04-0.7.5 SUSE Linux Enterprise Server 11 SP3:xen-tools-4.2.2_04-0.7.5 SUSE Linux Enterprise Server 11 SP3:xen-tools-domU-4.2.2_04-0.7.5 SUSE Linux Enterprise Server 11 SP4:xen-4.4.2_08-1.7 SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.2_08-1.7 SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.2_08_3.0.101_63-1.7 SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.2_08_3.0.101_63-1.7 SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.2_08-1.7 SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.2_08-1.7 SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.2_08-1.7 SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.2_08-1.7 SUSE Linux Enterprise Server for SAP Applications 11 SP2:xen-4.1.5_02-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:xen-doc-html-4.1.5_02-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:xen-doc-pdf-4.1.5_02-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:xen-kmp-default-4.1.5_02_3.0.74_0.6.10-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:xen-kmp-pae-4.1.5_02_3.0.74_0.6.10-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:xen-kmp-trace-4.1.5_02_3.0.74_0.6.10-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:xen-libs-4.1.5_02-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:xen-libs-32bit-4.1.5_02-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:xen-tools-4.1.5_02-0.5.1 SUSE Linux Enterprise Server for SAP Applications 11 SP2:xen-tools-domU-4.1.5_02-0.5.1 SUSE Linux Enterprise Software Development Kit 11 SP2:xen-devel-4.1.5_02-0.5.1 SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.2_08-1.7 SUSE Linux Enterprise Point of Service 11 SP3:xen moderate 4.4 AV:L/AC:M/Au:N/C:P/I:P/A:P