CVE-2013-4356: Medium severity xen xapi vulnerability
Published Oct 9, 2013
·Updated
Xen 4.3.x writes hypervisor mappings to certain shadow pagetables when live migration is performed on hosts with more than 5TB of RAM, which allows local 64-bit PV guests to read or write to invalid memory and cause a denial of service (crash).
Affected Software
1 affected component
XEN Xen=4.3.0
Event History
Oct 9, 2013
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-4356?
CVE-2013-4356 has a high severity rating due to its potential to cause denial of service in affected systems.
2
How do I fix CVE-2013-4356?
To fix CVE-2013-4356, upgrade to a patched version of Xen that addresses this vulnerability.
3
What software versions are affected by CVE-2013-4356?
CVE-2013-4356 specifically affects Xen version 4.3.0.
4
What impact does CVE-2013-4356 have on systems?
CVE-2013-4356 can allow local 64-bit PV guests to access invalid memory, potentially leading to system crashes.
5
Is there a workaround for CVE-2013-4356?
Currently, the recommended approach for CVE-2013-4356 is to apply available patches rather than relying on workarounds.