CVE-2013-4551

Severity: medium (CVSS 5.7 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-11-18 · updated 2026-06-16
Weakness: CWE-20

Description

Xen 4.2.x and 4.3.x, when nested virtualization is disabled, does not properly check the emulation paths for (1) VMLAUNCH and (2) VMRESUME, which allows local HVM guest users to cause a denial of service (host crash) via unspecified vectors related to "guest VMX instruction execution."

Affected products

xen: 4.2.0, 4.2.1, 4.2.2, 4.2.3, 4.3.0, 4.3.1

References

http://lists.opensuse.org/opensuse-updates/2013-12/msg00059.html
http://secunia.com/advisories/55398
http://security.gentoo.org/glsa/glsa-201407-03.xml
http://www.openwall.com/lists/oss-security/2013/11/11/1
http://www.securityfocus.com/bid/63625
http://www.securitytracker.com/id/1029313
https://exchange.xforce.ibmcloud.com/vulnerabilities/88649
http://lists.opensuse.org/opensuse-updates/2013-12/msg00059.html
http://secunia.com/advisories/55398
http://security.gentoo.org/glsa/glsa-201407-03.xml
http://www.openwall.com/lists/oss-security/2013/11/11/1
http://www.securityfocus.com/bid/63625

Get alerted when CVE-2013-4551 or the next vulnerability affects your stack