Buffer overflow in Xen

CVE-2013-1918

Certain page table manipulation operations in Xen 4.1.x, 4.2.x, and earlier are not preemptible, which allows local PV kernels to cause a denial of service via vectors related to "deep page table traversal."

Vulnerability class: Buffer Overflow

EPSS: 0.004 (29.0th percentile) — read the EPSS interpretation.

Affected products

  • Xen — versions 4.1.0, 4.1.1, 4.1.2
  • N/a — versions n/a

Weakness classification (CWE)

References