Lucene search

K
cve[email protected]CVE-2013-4551
HistoryNov 18, 2013 - 2:55 a.m.

CVE-2013-4551

2013-11-1802:55:08
CWE-20
web.nvd.nist.gov
24
xen
virtualization
cve-2013-4551
denial of service
vulnerability

5.7 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:M/Au:N/C:N/I:N/A:C

6 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.3%

Xen 4.2.x and 4.3.x, when nested virtualization is disabled, does not properly check the emulation paths for (1) VMLAUNCH and (2) VMRESUME, which allows local HVM guest users to cause a denial of service (host crash) via unspecified vectors related to “guest VMX instruction execution.”

Affected configurations

NVD
Node
xenxenMatch4.2.0
OR
xenxenMatch4.2.1
OR
xenxenMatch4.2.2
OR
xenxenMatch4.2.3
OR
xenxenMatch4.3.0
OR
xenxenMatch4.3.1

5.7 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:M/Au:N/C:N/I:N/A:C

6 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.3%