CVE-2013-4551

EPSS 0.43%
Veröffentlicht 18.11.2013 02:55:08
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle secalert@redhat.com
CVE-Watchlists
Login
Unerledigt
Login

Xen 4.2.x and 4.3.x, when nested virtualization is disabled, does not properly check the emulation paths for (1) VMLAUNCH and (2) VMRESUME, which allows local HVM guest users to cause a denial of service (host crash) via unspecified vectors related to "guest VMX instruction execution."

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 10

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Xen ≫ Xen Version4.2.0

Xen ≫ Xen Version4.2.1

Xen ≫ Xen Version4.2.2

Xen ≫ Xen Version4.2.3

Xen ≫ Xen Version4.3.0

Xen ≫ Xen Version4.3.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.43%	0.618

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5.7	5.5	6.9	AV:A/AC:M/Au:N/C:N/I:N/A:C

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://security.gentoo.org/glsa/glsa-201407-03.xml

http://lists.opensuse.org/opensuse-updates/2013-12/msg00059.html

http://secunia.com/advisories/55398

Vendor Advisory

http://www.openwall.com/lists/oss-security/2013/11/11/1

http://www.securityfocus.com/bid/63625

http://www.securitytracker.com/id/1029313

https://exchange.xforce.ibmcloud.com/vulnerabilities/88649

https://nvd.nist.gov/vuln/detail/CVE-2013-4551

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-4551

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-4551

EUVD