VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 17, 2013· Updated Jun 16, 2026

CVE-2013-4370

CVE-2013-4370

Description

The ocaml binding for the xc_vcpu_getaffinity function in Xen 4.2.x and 4.3.x frees certain memory that may still be intended for use, which allows local users to cause a denial of service (heap corruption and crash) and possibly execute arbitrary code via unspecified vectors that trigger a (1) use-after-free or (2) double free.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Xen/Xen6 versions
    cpe:2.3:o:xen:xen:4.2.0:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:o:xen:xen:4.2.0:*:*:*:*:*:*:*
    • cpe:2.3:o:xen:xen:4.2.1:*:*:*:*:*:*:*
    • cpe:2.3:o:xen:xen:4.2.2:*:*:*:*:*:*:*
    • cpe:2.3:o:xen:xen:4.2.3:*:*:*:*:*:*:*
    • cpe:2.3:o:xen:xen:4.3.0:*:*:*:*:*:*:*
    • (no CPE)range: 4.2.0 - 4.3.x

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.