VULNERABILITY INTELLIGENCE

CVE-2013-2072

CVSS score7.4 HIGH
EPSS probability1.06%
CISA KEVNot currently listed
Published2013-08-28
Last modified2026-06-16
CVSS vectorAV:A/AC:M/Au:S/C:C/I:C/A:C

Description

Buffer overflow in the Python bindings for the xc_vcpu_setaffinity call in Xen 4.0.x, 4.1.x, and 4.2.x allows local administrators with permissions to configure VCPU affinity to cause a denial of service (memory corruption and xend toolstack crash) and possibly gain privileges via a crafted cpumap.

Weakness classification

  • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Primary references