CVE-2013-3495: Medium severity opensuse vulnerability

Published Aug 28, 2013

Updated

The Intel VT-d Interrupt Remapping engine in Xen 3.3.x through 4.3.x allows local guests to cause a denial of service (kernel panic) via a malformed Message Signaled Interrupt (MSI) from a PCI device that is bus mastering capable that triggers a System Error Reporting (SERR) Non-Maskable Interrupt (NMI).

Affected Software

25 affected components

openSUSE openSUSE=13.1

openSUSE openSUSE=13.2

XEN Xen=3.3.0

XEN Xen=3.3.1

XEN Xen=3.3.2

XEN Xen=3.4.0

XEN Xen=3.4.1

XEN Xen=3.4.2

XEN Xen=3.4.3

XEN Xen=3.4.4

XEN Xen=4.0.0

XEN Xen=4.0.1

XEN Xen=4.0.2

XEN Xen=4.0.3

XEN Xen=4.0.4

XEN Xen=4.1.0

XEN Xen=4.1.1

XEN Xen=4.1.2

XEN Xen=4.1.3

XEN Xen=4.1.4

XEN Xen=4.1.5

XEN Xen=4.2.0

XEN Xen=4.2.1

XEN Xen=4.2.2

XEN Xen=4.3.0

Event History

Aug 28, 2013

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2013-3495?

CVE-2013-3495 is rated as a high severity vulnerability due to its potential to cause kernel panic and denial of service.

How do I fix CVE-2013-3495?

To fix CVE-2013-3495, upgrade to a patched version of Xen or apply the relevant updates provided by your distribution.

What versions of Xen are affected by CVE-2013-3495?

CVE-2013-3495 affects Xen versions from 3.3.x through 4.3.x, including specific versions like 3.3.1, 4.1.5, and others.

How can CVE-2013-3495 be exploited?

CVE-2013-3495 can be exploited by local guests sending a malformed Message Signaled Interrupt (MSI) from a bus mastering capable PCI device.

What are the consequences of CVE-2013-3495 exploitation?

Exploiting CVE-2013-3495 can lead to a denial of service condition resulting in a kernel panic, impacting the stability of the host system.