Vulnerability in Xen

CVE-2013-0153

The AMD IOMMU support in Xen 4.2.x, 4.1.x, 3.3, and other versions, when using AMD-Vi for PCI passthrough, uses the same interrupt remapping table for the host and all guests, which allows guests to cause a denial of service by injecting an interrupt into other guests.

EPSS: 0.004 (33.7th percentile) — read the EPSS interpretation.

Affected products

  • Xen — versions 4.2.0, 4.2.1, 4.1.0
  • N/a — versions n/a

References