CVE-2013-4370

Name of the Vulnerable Software and Affected Versions Xen versions 4.2.x through 4.3.x

Description The issue allows local users to cause a denial of service, potentially leading to heap corruption and crash, and possibly execute arbitrary code. This is achieved through unspecified vectors that trigger either a use-after-free or double free error in the ocaml binding for the xc vcpu getaffinity function.

Recommendations For Xen versions 4.2.x through 4.3.x, consider applying a patch that fixes the memory handling issue in the ocaml binding for the xc vcpu getaffinity function to prevent use-after-free and double free errors. At the moment, there is no information about a newer version that contains a fix for this vulnerability.