CVE-2013-0151

Xen 4.2.x - Denial of Service via HVM_PARAM_NESTEDHVM Operations

Title source: llm
STIX 2.1

Description

The do_hvm_op function in xen/arch/x86/hvm/hvm.c in Xen 4.2.x on the x86_32 platform does not prevent HVM_PARAM_NESTEDHVM (aka nested virtualization) operations, which allows guest OS users to cause a denial of service (long-duration page mappings and host OS crash) by leveraging administrative access to an HVM guest in a domain with a large number of VCPUs.

References (4)

Core 4
Core References
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/55082
Third Party Advisory vendor-advisory x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-201309-24.xml
Mailing List mailing-list x_refsource_mlist
http://openwall.com/lists/oss-security/2013/01/22/10

Scores

EPSS 0.0013
EPSS Percentile 31.5%

Details

CWE
CWE-264
Status published
Products (2)
xen/xen 4.2.0
xen/xen 4.2.1
Published Mar 07, 2013
Tracked Since Feb 18, 2026