Lucene search

K
cve[email protected]CVE-2013-4356
HistoryOct 09, 2013 - 10:55 p.m.

CVE-2013-4356

2013-10-0922:55:00
CWE-264
web.nvd.nist.gov
31
xen
vulnerability
64-bit
denial of service
nvd
cve-2013-4356

6.2 Medium

AI Score

Confidence

Low

5.4 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:M/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

51.9%

Xen 4.3.x writes hypervisor mappings to certain shadow pagetables when live migration is performed on hosts with more than 5TB of RAM, which allows local 64-bit PV guests to read or write to invalid memory and cause a denial of service (crash).

CPENameOperatorVersion
xen:xenxeneq4.3.0

6.2 Medium

AI Score

Confidence

Low

5.4 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:M/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

51.9%