CWE Code: 20
Vulnerability Type: privilege_escalation
CVSS Score: 6.1
CWE Name:  Improper Input Validation
Summary: the physdev_get_free_pirq hypercall in arch/x86/physdev.c in xen 4.1.x and citrix xenserver 6.0.2 and earlier uses the return value of the get_free_pirq function as an array index without checking that the return value indicates an error, which allows guest os users to cause a denial of service (invalid memory write and host crash) and possibly gain privileges via unspecified vectors.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): PARTIAL/PARTIAL/COMPLETE
Published Date: 2012-11-23
Last Modified Date: 2017-07-01