CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 6.5
CWE Name:  Permissions Privileges and Access Controls
Summary: the xenlight library (libxl) in xen 4.0.x through 4.2.x, when iommu is disabled, provides access to a busmastering-capable pci passthrough device before the iommu setup is complete, which allows local hvm guest domains to gain privileges or cause a denial of service via a dma instruction.
Access Authentication: SINGLE
Access Complexity: HIGH
Access Vector: ADJACENT_NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2013-09-12
Last Modified Date: 2017-01-07