CVE-2013-1917: Input Validation
Xen 3.1 through 4.x, when running 64-bit hosts on Intel CPUs, does not clear the NT flag when using an IRET after a SYSENTER instruction, which allows PV guest users to cause a denial of service (hypervisor crash) by triggering a #GP fault, which is not properly handled by another IRET instruction.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-1917?
CVE-2013-1917 has a severity rating that indicates it can cause a denial of service through a hypervisor crash.
How do I fix CVE-2013-1917?
To fix CVE-2013-1917, update your Xen software to a version that addresses this vulnerability.
What systems are affected by CVE-2013-1917?
CVE-2013-1917 affects Xen versions 3.1 through 4.x running on 64-bit hosts with Intel CPUs.
What types of attacks can exploit CVE-2013-1917?
CVE-2013-1917 can be exploited by PV guest users to trigger a hypervisor crash.
Is there a workaround for CVE-2013-1917?
Currently, the best solution for CVE-2013-1917 is to apply the latest security patches and updates for your Xen installation.