CVE-2013-0153: Medium severity xen xapi vulnerability

Published Feb 14, 2013

Updated

The AMD IOMMU support in Xen 4.2.x, 4.1.x, 3.3, and other versions, when using AMD-Vi for PCI passthrough, uses the same interrupt remapping table for the host and all guests, which allows guests to cause a denial of service by injecting an interrupt into other guests.

Affected Software

8 affected components

XEN Xen=4.2.0

XEN Xen=4.2.1

XEN Xen=4.1.0

XEN Xen=4.1.1

XEN Xen=4.1.2

XEN Xen=4.1.3

XEN Xen=4.1.4

XEN Xen=3.3.0

Event History

Feb 14, 2013

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2013-0153?

CVE-2013-0153 is classified as a high severity vulnerability due to its potential to lead to denial of service across virtual machines.

How do I fix CVE-2013-0153?

To mitigate CVE-2013-0153, update to the latest stable version of Xen that includes patches addressing this vulnerability.

Which versions of Xen are affected by CVE-2013-0153?

CVE-2013-0153 affects Xen versions 3.3, 4.1.0 through 4.1.4, and 4.2.0 through 4.2.1.

What type of attack is possible with CVE-2013-0153?

CVE-2013-0153 allows an attacker to inject interrupts into other guest systems, potentially causing instability or denial of service.

Is CVE-2013-0153 specific to certain hardware?

Yes, CVE-2013-0153 specifically impacts systems using AMD-Vi for PCI passthrough.