CVE-2013-0216: Input Validation
Last updated 24 July 2024
Other sources
The Xen netback functionality in the Linux kernel before 3.7.8 allows guest OS users to cause a denial of service (loop) by triggering ring pointer corruption.
— Launchpad
The Xen netback implementation contains a couple of flaws which can allow a guest to cause a DoS in the backend domain, potentially affecting other domains in the system.
CVE-2013-0216 is a failure to sanity check the ring producer/consumer pointers which can allow a guest to cause netback to loop for an extended period preventing other work from occurring.
CVE-2013-0217 is a memory leak on an error path which is guest triggerable.
A malicious guest with access to PV network devices can mount a DoS affecting the entire system.
Acknowledgements:
Red Hat would like to thank the Xen project for reporting this issue.
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2013-0216?
CVE-2013-0216 has a severity rating that allows guest OS users to cause a denial of service (DoS) by triggering ring pointer corruption.
How do I fix CVE-2013-0216?
To fix CVE-2013-0216, you should upgrade to a Linux kernel version that is 3.7.9 or later.
Which systems are affected by CVE-2013-0216?
CVE-2013-0216 affects the Linux kernel versions prior to 3.7.8, including various 3.0.x and 3.1.x versions.
What type of vulnerability is CVE-2013-0216?
CVE-2013-0216 is classified as a denial of service (DoS) vulnerability.
Is there a workaround for CVE-2013-0216?
There are no known effective workarounds for CVE-2013-0216, so updating the kernel is recommended.