CVE-2013-0153
Advisory lineage Upstream: 0 Downstream: 4
Modified
Published: 14 Feb 2013, 22:00
Last modified:06 Aug 2024, 14:18
Vulnerability Summary
Overall Risk (default)
low
19/100 CVSS Score
4.7 MEDIUM
v2.0 (nvd)
EPSS Score
0.12% LOW
0% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
14 Feb 2013, 22:00
Published
Vulnerability first disclosed
06 Aug 2024, 14:18
Last Modified
Vulnerability information updated
Description
The AMD IOMMU support in Xen 4.2.x, 4.1.x, 3.3, and other versions, when using AMD-Vi for PCI passthrough, uses the same interrupt remapping table for the host and all guests, which allows guests to cause a denial of service by injecting an interrupt into other guests.
CVSS Metrics
- v2.0•MEDIUM•Score: 4.7AV:L/AC:M/Au:N/C:N/I:N/A:C
EPSS Trends
Current EPSS score: 0.12%• Percentile: 30%
Affected Systems
- xen•xen
4.2.0 | 4.2.1 | 4.1.0 | 4.1.1 | 4.1.2 | 4.1.3 | 4.1.4 | 3.3.0
References (13)
- https://exchange.xforce.ibmcloud.com/vulnerabilities/81831
- http://secunia.com/advisories/55082
- http://lists.opensuse.org/opensuse-updates/2013-04/msg00052.html
- http://secunia.com/advisories/51881
- http://security.gentoo.org/glsa/glsa-201309-24.xml
- http://www.debian.org/security/2013/dsa-2636
- http://lists.opensuse.org/opensuse-updates/2013-06/msg00049.html
- http://www.openwall.com/lists/oss-security/2013/02/05/7
- http://osvdb.org/89867
- http://rhn.redhat.com/errata/RHSA-2013-0847.html
- http://lists.opensuse.org/opensuse-updates/2013-04/msg00051.html
- http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html
- http://www.securityfocus.com/bid/57745