PT-2013-3467 · Xen+1 · Xen+1

Published 2013-05-13 · Updated 2024-06-15 · CVE-2013-1917

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Low

Base vector

AV:L/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Xen versions 3.1 through 4.x

Description The issue allows PV guest users to cause a denial of service by triggering a #GP fault, which is not properly handled, leading to a hypervisor crash. This occurs when running 64-bit hosts on Intel CPUs and using an IRET after a SYSENTER instruction without clearing the NT flag.

Recommendations For Xen versions 3.1 through 4.x, consider applying a patch that properly handles #GP faults and clears the NT flag when using an IRET after a SYSENTER instruction to prevent hypervisor crashes.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2013-1917

DSA-2662-1

OPENSUSE-SU-2024:10196-1

SUSE-SU-2013_1075-1

Affected Products

Suse

Xen

References · 175

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2078 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:10196-1 · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2013-06/msg00049.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2013-1917 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1917 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00015.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1919 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2013-1917 · Vendor Advisory
• http://debian.org/security/2012/dsa-2662 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1964 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1918 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2072 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2076 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-201309-24.xml · Vendor Advisory