What is CVE-2013-6375?

CVE-2013-6375 is a vulnerability in Xen, classified under CWE-264. Published 2013-11-23.

Is CVE-2013-6375 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Xen

CVE-2013-6375

Xen 4.2.x and 4.3.x, when using Intel VT-d for PCI passthrough, does not properly flush the TLB after clearing a present translation table entry, which allows local guest administrators to cause a denial of service or gain privileges via unspecified vectors related to an "inverted boolean parameter."

EPSS: 0.014 (69.5th percentile) — read the EPSS interpretation.

Affected products

Xen — versions 4.2.1, 4.2.2, 4.2.3
Opensuse — versions 13.1
N/a — versions n/a

Weakness classification (CWE)

CWE-264

Public proof-of-concept exploits

bl4ck5un/cve-2013-6375

References

secalert@redhat.com (vendor-advisory, x_refsource_GENTOO)
secalert@redhat.com (mailing-list, x_refsource_MLIST, Mailing List, Third Party Advisory)
secalert@redhat.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
secalert@redhat.com (vendor-advisory, Third Party Advisory, x_refsource_SUSE)
secalert@redhat.com (mailing-list, x_refsource_MLIST, Mailing List, Third Party Advisory)

Frequently asked questions

What is CVE-2013-6375?: CVE-2013-6375 is a vulnerability in Xen, classified under CWE-264. Published 2013-11-23.
Is CVE-2013-6375 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.