CVE-2013-2212

Xen 3.3-4.3 - Denial of Service via vmx_set_uc_mode GFN Range

Title source: llm
STIX 2.1

Description

The vmx_set_uc_mode function in Xen 3.3 through 4.3, when disabling caches, allows local HVM guests with access to memory mapped I/O regions to cause a denial of service (CPU consumption and possibly hypervisor or guest kernel panic) via a crafted GFN range.

References (5)

Core 5
Core References
Third Party Advisory vendor-advisory x_refsource_gentoo
https://security.gentoo.org/glsa/201504-04
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2013/07/24/6

Scores

EPSS 0.0018
EPSS Percentile 38.8%

Details

CWE
CWE-119
Status published
Products (23)
xen/xen 3.3.0
xen/xen 3.3.1
xen/xen 3.3.2
xen/xen 3.4.0
xen/xen 3.4.1
xen/xen 3.4.2
xen/xen 3.4.3
xen/xen 3.4.4
xen/xen 4.0.0
xen/xen 4.0.1
... and 13 more
Published Aug 28, 2013
Tracked Since Feb 18, 2026