Unrated severityNVD Advisory· Published Aug 28, 2013· Updated Jun 16, 2026
CVE-2013-2072
CVE-2013-2072
Description
Buffer overflow in the Python bindings for the xc_vcpu_setaffinity call in Xen 4.0.x, 4.1.x, and 4.2.x allows local administrators with permissions to configure VCPU affinity to cause a denial of service (memory corruption and xend toolstack crash) and possibly gain privileges via a crafted cpumap.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
16cpe:2.3:o:xen:xen:4.0.0:*:*:*:*:*:*:*+ 14 more
- cpe:2.3:o:xen:xen:4.0.0:*:*:*:*:*:*:*
- cpe:2.3:o:xen:xen:4.0.1:*:*:*:*:*:*:*
- cpe:2.3:o:xen:xen:4.0.2:*:*:*:*:*:*:*
- cpe:2.3:o:xen:xen:4.0.3:*:*:*:*:*:*:*
- cpe:2.3:o:xen:xen:4.0.4:*:*:*:*:*:*:*
- cpe:2.3:o:xen:xen:4.1.0:*:*:*:*:*:*:*
- cpe:2.3:o:xen:xen:4.1.1:*:*:*:*:*:*:*
- cpe:2.3:o:xen:xen:4.1.2:*:*:*:*:*:*:*
- cpe:2.3:o:xen:xen:4.1.3:*:*:*:*:*:*:*
- cpe:2.3:o:xen:xen:4.1.4:*:*:*:*:*:*:*
- cpe:2.3:o:xen:xen:4.1.5:*:*:*:*:*:*:*
- cpe:2.3:o:xen:xen:4.2.0:*:*:*:*:*:*:*
- cpe:2.3:o:xen:xen:4.2.1:*:*:*:*:*:*:*
- cpe:2.3:o:xen:xen:4.2.2:*:*:*:*:*:*:*
- (no CPE)range: >=4.0, <=4.2
Patches
Vulnerability mechanics
References
7- lists.fedoraproject.org/pipermail/package-announce/2013-May/106718.htmlnvd
- lists.fedoraproject.org/pipermail/package-announce/2013-May/106721.htmlnvd
- lists.fedoraproject.org/pipermail/package-announce/2013-May/106778.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.htmlnvd
- www.debian.org/security/2014/dsa-3041nvd
- www.openwall.com/lists/oss-security/2013/05/17/2nvd
- www.securityfocus.com/bid/59982nvd
News mentions
0No linked articles in our index yet.