Vulnerability in Xen

CVE-2013-4369

The xlu_vif_parse_rate function in the libxlu library in Xen 4.2.x and 4.3.x allows local users to cause a denial of service (NULL pointer dereference) by using the "@" character as the VIF rate configuration.

EPSS: 0.003 (26.9th percentile) — read the EPSS interpretation.

Affected products

  • Xen — versions 4.2.0, 4.2.1, 4.2.2
  • N/a — versions n/a

References