Lucene search
HistoryAug 28, 2013 - 9:55 p.m.
CVE-2013-2212
cve-2013-2212
xen
denial of service
cpu consumption
hypervisor panic
guest kernel panic
nvd
5.7 Medium
CVSS2
Attack Vector
ADJACENT_NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:A/AC:M/Au:N/C:N/I:N/A:C
5.9 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
55.4%
The vmx_set_uc_mode function in Xen 3.3 through 4.3, when disabling caches, allows local HVM guests with access to memory mapped I/O regions to cause a denial of service (CPU consumption and possibly hypervisor or guest kernel panic) via a crafted GFN range.
Affected configurations
Node
xenxenMatch3.3.0
ORxenxenMatch3.3.1
ORxenxenMatch3.3.2
ORxenxenMatch3.4.0
ORxenxenMatch3.4.1
ORxenxenMatch3.4.2
ORxenxenMatch3.4.3
ORxenxenMatch3.4.4
ORxenxenMatch4.0.0
ORxenxenMatch4.0.1
ORxenxenMatch4.0.2
ORxenxenMatch4.0.3
ORxenxenMatch4.0.4
ORxenxenMatch4.1.0
ORxenxenMatch4.1.1
ORxenxenMatch4.1.2
ORxenxenMatch4.1.3
ORxenxenMatch4.1.4
ORxenxenMatch4.1.5
ORxenxenMatch4.2.0
ORxenxenMatch4.2.1
ORxenxenMatch4.2.2
ORxenxenMatch4.3.0
Related
prion
prion
Design/Logic Flaw
2013-08-28 21:55:00
xen
xen
Excessive time to disable caching with HVM guests with PCI passthrough
2013-07-19 12:00:00
debiancve
debiancve
CVE-2013-2212
2013-08-28 21:55:08
cvelist
cvelist
CVE-2013-2212
2013-08-28 17:00:00
ubuntucve
ubuntucve
CVE-2013-2212
2013-08-28 00:00:00
nvd
nvd
CVE-2013-2212
2013-08-28 21:55:08
nessus
nessus
Fedora 20 : xen-4.3.2-1.fc20 (2014-2802)
2014-03-03 00:00:00
Fedora 19 : xen-4.2.4-2.fc19 (2014-2862)
2014-03-03 00:00:00
OracleVM 3.2 : xen (OVMSA-2015-0142)
2015-10-30 00:00:00
suse
suse
Security update for Xen (important)
2014-03-14 00:04:13
Security update for Xen (important)
2014-03-14 00:06:40
Security update for Xen (important)
2014-03-25 23:04:15
openvas
openvas
SUSE: Security Advisory for Xen (SUSE-SU-2014:0372-1)
2015-10-16 00:00:00
SUSE: Security Advisory (SUSE-SU-2014:0372-1)
2021-06-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2014:0373-1)
2021-06-09 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: xen-4.3.2-1.fc20
2014-03-02 03:45:00
[SECURITY] Fedora 20 Update: xen-4.3.2-3.fc20
2014-05-12 05:19:03
[SECURITY] Fedora 20 Update: xen-4.3.2-2.fc20
2014-04-06 02:35:21
gentoo
gentoo
Xen: Multiple vulnerabilities
2015-04-11 00:00:00
5.7 Medium
CVSS2
Attack Vector
ADJACENT_NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:A/AC:M/Au:N/C:N/I:N/A:C
5.9 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
55.4%
Related for CVE-2013-2212