CVE-2013-6375: High severity XEN Xen vulnerability

Published Nov 23, 2013

Updated

Xen 4.2.x and 4.3.x, when using Intel VT-d for PCI passthrough, does not properly flush the TLB after clearing a present translation table entry, which allows local guest administrators to cause a denial of service or gain privileges via unspecified vectors related to an "inverted boolean parameter."

Affected Software

6 affected components

XEN Xen=4.2.1

XEN Xen=4.2.2

XEN Xen=4.2.3

XEN Xen=4.3.0

XEN Xen=4.3.1

openSUSE openSUSE=13.1

Event History

Nov 23, 2013

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

Description

Data Sourced

via NVD·11:55 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2013-6375?

CVE-2013-6375 is classified as a high severity vulnerability due to the potential for local guest administrators to cause a denial of service or escalate privileges.

How do I fix CVE-2013-6375?

To fix CVE-2013-6375, upgrade to a non-vulnerable version of Xen, such as versions 4.2.4 or 4.3.2 and later.

What software versions are affected by CVE-2013-6375?

CVE-2013-6375 affects Xen versions 4.2.1, 4.2.2, 4.2.3, 4.3.0, and 4.3.1.

What type of attack does CVE-2013-6375 enable?

CVE-2013-6375 enables local guest administrators to potentially cause a denial of service or escalate privileges within the affected system.

Is there a workaround for CVE-2013-6375?

There is no specific workaround for CVE-2013-6375; therefore, the best mitigation is to upgrade to a patched version.