CVE-2013-4356

Published: Oct 9, 2013Modified: Apr 29, 2026

5.4

Vector

AV:A/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 5.5 / Impact: 6.4

Source: NVD

Description

Xen 4.3.x writes hypervisor mappings to certain shadow pagetables when live migration is performed on hosts with more than 5TB of RAM, which allows local 64-bit PV guests to read or write to invalid memory and cause a denial of service (crash).

Affected (1)

Products: Xen: Xen

Xen

1 product

Xen

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Xen Xen	Version 4.3.0

Related CWEs

CWE-264

References (8)

http://secunia.com/advisories/54962

Source: secalert@redhat.com

Vendor Advisory

http://security.gentoo.org/glsa/glsa-201407-03.xml

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2013/09/30/2

Source: secalert@redhat.com

http://www.securityfocus.com/bid/62709

Source: secalert@redhat.com

http://secunia.com/advisories/54962

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://security.gentoo.org/glsa/glsa-201407-03.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2013/09/30/2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/62709

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.