Buffer overflow in Xen

CVE-2013-2212

The vmx_set_uc_mode function in Xen 3.3 through 4.3, when disabling caches, allows local HVM guests with access to memory mapped I/O regions to cause a denial of service (CPU consumption and possibly hypervisor or guest kernel panic) via a crafted GFN range.

Vulnerability class: Buffer Overflow

EPSS: 0.006 (46.2th percentile) — read the EPSS interpretation.

Affected products

  • Xen — versions 3.3.0, 3.3.1, 3.3.2
  • N/a — versions n/a

Weakness classification (CWE)

References