Lucene search

K
ubuntucveUbuntu.comUB:CVE-2013-4551
HistoryNov 18, 2013 - 12:00 a.m.

CVE-2013-4551

2013-11-1800:00:00
ubuntu.com
ubuntu.com
10

5.7 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:M/Au:N/C:N/I:N/A:C

0.005 Low

EPSS

Percentile

75.3%

Xen 4.2.x and 4.3.x, when nested virtualization is disabled, does not
properly check the emulation paths for (1) VMLAUNCH and (2) VMRESUME, which
allows local HVM guest users to cause a denial of service (host crash) via
unspecified vectors related to “guest VMX instruction execution.”

Notes

Author Note
seth-arnold Only 4.2.x and newer are affected
mdeslaur This is XSA-75
OSVersionArchitecturePackageVersionFilename
ubuntu13.04noarchxen< 4.2.2-0ubuntu0.13.04.3UNKNOWN
ubuntu13.10noarchxen< 4.3.0-1ubuntu1.2UNKNOWN

5.7 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:M/Au:N/C:N/I:N/A:C

0.005 Low

EPSS

Percentile

75.3%