Buffer overflow in Xen

CVE-2013-4416

The Ocaml xenstored implementation (oxenstored) in Xen 4.1.x, 4.2.x, and 4.3.x allows local guest domains to cause a denial of service (domain shutdown) via a large message reply.

Vulnerability class: Buffer Overflow

EPSS: 0.005 (42.6th percentile) — read the EPSS interpretation.

Affected products

  • Xen — versions 4.1.0, 4.1.1, 4.1.2
  • N/a — versions n/a

Weakness classification (CWE)

References