CVEvulnerability

CVE-2013-2212

5.7 MEDIUM Published 2013-08-28 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-08-28
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.7 MEDIUM — AV:A/AC:M/Au:N/C:N/I:N/A:C
Weaknesses
CWE-119

Description

The vmx_set_uc_mode function in Xen 3.3 through 4.3, when disabling caches, allows local HVM guests with access to memory mapped I/O regions to cause a denial of service (CPU consumption and possibly hypervisor or guest kernel panic) via a crafted GFN range.

Affected configurations

• xen xen 3.3.0 • xen xen 3.3.1 • xen xen 3.3.2 • xen xen 3.4.0 • xen xen 3.4.1 • xen xen 3.4.2 • xen xen 3.4.3 • xen xen 3.4.4 • xen xen 4.0.0 • xen xen 4.0.1 • xen xen 4.0.2 • xen xen 4.0.3 • xen xen 4.0.4 • xen xen 4.1.0 • xen xen 4.1.1 • xen xen 4.1.2 • xen xen 4.1.3 • xen xen 4.1.4 • xen xen 4.1.5 • xen xen 4.2.0 • xen xen 4.2.1 • xen xen 4.2.2 • xen xen 4.3.0

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References