← Back

CVE-2013-4355

nvd nist
Published: Oct 1, 2013Modified: Apr 29, 2026

JSON object

Loading...
1.5
Vector
AV:L/AC:M/Au:S/C:P/I:N/A:N
Exploitability: 2.7 / Impact: 2.9
Source: NVD

Description

Xen 4.3.x and earlier does not properly handle certain errors, which allows local HVM guests to obtain hypervisor stack memory via a (1) port or (2) memory mapped I/O write or (3) other unspecified operations related to addresses without associated memory.

Affected (33)

Products: Xen: Xen
Xen
1 product
Xen
Configuration A
33 vulnerable
Vulnerable SoftwareAffected Versions
Xen
Xen
Up to 4.3.0
Xen
Version 3.0.2
Xen
Version 3.0.3
Xen
Version 3.0.4
Xen
Version 3.1.3
Xen
Version 3.1.4
Xen
Version 3.2.0
Xen
Version 3.2.1
Xen
Version 3.2.2
Xen
Version 3.2.3
Xen
Version 3.3.0
Xen
Version 3.3.1
Xen
Version 3.3.2
Xen
Version 3.4.0
Xen
Version 3.4.1
Xen
Version 3.4.2
Xen
Version 3.4.3
Xen
Version 3.4.4
Xen
Version 4.0.0
Xen
Version 4.0.1
Xen
Version 4.0.2
Xen
Version 4.0.3
Xen
Version 4.0.4
Xen
Version 4.1.0
Xen
Version 4.1.1
Xen
Version 4.1.2
Xen
Version 4.1.3
Xen
Version 4.1.4
Xen
Version 4.1.5
Xen
Version 4.2.0
Xen
Version 4.2.1
Xen
Version 4.2.2
Xen
Version 4.2.3

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (16)

Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.