PT-2013-4970 · Xen · Xen

Andrew Cooper · Published 2013-10-09 · Updated 2024-06-15 · CVE-2013-4356

Positive Technologies (AI Summary)

CVSS v2.0

5.4

Medium

Base vector

AV:A/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Xen versions 4.3.x

Description The issue allows local 64-bit PV guests to read or write to invalid memory and cause a denial of service (crash) when live migration is performed on hosts with more than 5TB of RAM.

Recommendations For Xen version 4.3.x, consider disabling live migration on hosts with more than 5TB of RAM as a temporary workaround until a patch is available.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2013-4356

OPENSUSE-SU-2024:10196-1

Affected Products

Xen

References · 133

• https://osv.dev/vulnerability/DEBIAN-CVE-2013-4356 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10196-1 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-201407-03.xml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-4356 · Security Note
• http://secunia.com/advisories/54962 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2013-4356 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2013-4356 · Vendor Advisory
• https://suse.com/security/cve/CVE-2014-3124 · Note
• https://suse.com/security/cve/CVE-2014-3672 · Note
• https://suse.com/security/cve/CVE-2015-7970 · Note
• https://suse.com/security/cve/CVE-2012-4411 · Note
• https://suse.com/security/cve/CVE-2016-2538 · Note
• https://suse.com/security/cve/CVE-2015-7969 · Note
• https://suse.com/security/cve/CVE-2015-8615 · Note
• https://suse.com/security/cve/CVE-2014-5146 · Note