CWE Code: 119
Vulnerability Type: privilege_escalation
CVSS Score: 7.4
CWE Name:  Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary: buffer overflow in the python bindings for the xc_vcpu_setaffinity call in xen 4.0.x, 4.1.x, and 4.2.x allows local administrators with permissions to configure vcpu affinity to cause a denial of service (memory corruption and xend toolstack crash) and possibly gain privileges via a crafted cpumap.
Access Authentication: SINGLE
Access Complexity: MEDIUM
Access Vector: ADJACENT_NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2013-08-28
Last Modified Date: 2016-12-31