CVE-2013-1952: Input Validation
Xen 4.x, when using Intel VT-d for a bus mastering capable PCI device, does not properly check the source when accessing a bridge device's interrupt remapping table entries for MSI interrupts, which allows local guest domains to cause a denial of service (interrupt injection) via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-1952?
CVE-2013-1952 is classified as a denial of service vulnerability that can be exploited by local guest domains.
How do I fix CVE-2013-1952?
To mitigate CVE-2013-1952, it is recommended to upgrade to a patched version of Xen that addresses the issue.
What versions are affected by CVE-2013-1952?
CVE-2013-1952 affects Xen versions 4.0.0 through 4.2.2.
What type of attack does CVE-2013-1952 allow?
CVE-2013-1952 allows local guest domains to perform interrupt injection, leading to a denial of service.
Who is impacted by CVE-2013-1952?
Users running affected versions of Xen in environments utilizing Intel VT-d for PCI devices are impacted by CVE-2013-1952.