CVE-2013-4416

Xen 4.1.x-4.3.x - Denial of Service via Large Message Reply

Title source: llm
STIX 2.1

Description

The Ocaml xenstored implementation (oxenstored) in Xen 4.1.x, 4.2.x, and 4.3.x allows local guest domains to cause a denial of service (domain shutdown) via a large message reply.

References (7)

Core 7
Core References
Third Party Advisory vendor-advisory x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-201407-03.xml
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1029264
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/99072
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2013/10/29/5
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/63404
Mailing List vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2013-11/msg00009.html
Mailing List vendor-advisory x_refsource_suse
http://lists.opensuse.org/opensuse-updates/2013-12/msg00059.html

Scores

EPSS 0.0028
EPSS Percentile 51.3%

Details

CWE
CWE-119
Status published
Products (13)
xen/xen 4.1.0
xen/xen 4.1.1
xen/xen 4.1.2
xen/xen 4.1.3
xen/xen 4.1.4
xen/xen 4.1.5
xen/xen 4.1.6.1
xen/xen 4.2.0
xen/xen 4.2.1
xen/xen 4.2.2
... and 3 more
Published Nov 02, 2013
Tracked Since Feb 18, 2026