CVE-2013-4329

The xenlight library libxl in Xen 4.0.x through 4.2.x, when IOMMU is disabled, provides access to a busmastering-capable PCI passthrough device before the IOMMU setup is complete, which allows local HVM guest domains to gain privileges or cause a denial of service via a DMA instruction...

CVE-2013-4329

The CVE affects the Xen hypervisor, specifically the xenlight library (libxl) used by the Xen toolstack. In Xen 4.0.x–4.2.x, when IOMMU is disabled, a busmastering PCI passthrough device can be accessed before IOMMU initialization completes, allowing local HVM guests to gain privileges or cause a...