Vulnerability in Xen

CVE-2013-3495

The Intel VT-d Interrupt Remapping engine in Xen 3.3.x through 4.3.x allows local guests to cause a denial of service (kernel panic) via a malformed Message Signaled Interrupt (MSI) from a PCI device that is bus mastering capable that triggers a System Error Reporting (SERR) Non-Maskable Interrupt (NMI).

EPSS: 0.004 (31.6th percentile) — read the EPSS interpretation.

Affected products

  • Xen — versions 3.3.0, 3.3.1, 3.3.2
  • Opensuse — versions 13.1, 13.2
  • N/a — versions n/a

Weakness classification (CWE)

References

  • cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
  • cve@mitre.org (vendor-advisory, x_refsource_GENTOO)
  • cve@mitre.org (x_refsource_OSVDB, vdb-entry, Broken Link)
  • cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
  • cve@mitre.org (mailing-list, x_refsource_MLIST, Mailing List, Third Party Advisory)
  • cve@mitre.org (vendor-advisory, Third Party Advisory, x_refsource_SUSE)
  • cve@mitre.org (vendor-advisory, Third Party Advisory, x_refsource_SUSE)
  • cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)