VulnerabilityModified
CVE-2013-4551
Xen 4.2.x and 4.3.x, when nested virtualization is disabled, does not properly check the emulation paths for (1) VMLAUNCH and (2) VMRESUME, which allows local HVM guest users to cause a denial of service (host crash) via unspecified vectors related to…
MEDIUM 5.7EPSS 0.80%
Does this matter?
Lower severity and a low EPSS score (0.80%). Track it; it rarely justifies an emergency change on its own.
Description
Xen 4.2.x and 4.3.x, when nested virtualization is disabled, does not properly check the emulation paths for (1) VMLAUNCH and (2) VMRESUME, which allows local HVM guest users to cause a denial of service (host crash) via unspecified vectors related to "guest VMX instruction execution."
- CVSS 2.0
- 5.7 MEDIUMAV:A/AC:M/Au:N/C:N/I:N/A:C
- EPSS
- 0.80% probability · 55th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- xen/xen
- Source
- secalert@redhat.com
References
- http://lists.opensuse.org/opensuse-updates/2013-12/msg00059.html
- http://secunia.com/advisories/55398Vendor Advisory
- http://security.gentoo.org/glsa/glsa-201407-03.xml
- http://www.openwall.com/lists/oss-security/2013/11/11/1
- http://www.securityfocus.com/bid/63625
- http://www.securitytracker.com/id/1029313
- https://exchange.xforce.ibmcloud.com/vulnerabilities/88649
- http://lists.opensuse.org/opensuse-updates/2013-12/msg00059.html
- http://secunia.com/advisories/55398Vendor Advisory
- http://security.gentoo.org/glsa/glsa-201407-03.xml
- http://www.openwall.com/lists/oss-security/2013/11/11/1
- http://www.securityfocus.com/bid/63625
- http://www.securitytracker.com/id/1029313
- https://exchange.xforce.ibmcloud.com/vulnerabilities/88649
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.