Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
1.9

CVE-2013-0154: Xen 4.2 can crash if debug mode is on

CVE-2013-0154 · published 13 years ago
Summary

In Xen version 4.2, a debugging feature can be abused by a guest machine's administrator to make the hypervisor stop working. This happens when a special request from the guest triggers an internal check that fails, causing the whole system to halt. Disable debugging mode or upgrade to a newer Xen release to prevent the crash.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
xen xen 4.2.0
cpe:2.3:o:xen:xen:4.2.0:*:*:*:*:*:*:*
Original advisory text
The get_page_type function in xen/arch/x86/mm.c in Xen 4.2, when debugging is enabled, allows local PV or HVM guest administrators to cause a denial of service (assertion failure and hypervisor cra...
The get_page_type function in xen/arch/x86/mm.c in Xen 4.2, when debugging is enabled, allows local PV or HVM guest administrators to cause a denial of service (assertion failure and hypervisor crash) via unspecified vectors related to a hypercall.
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
1.9 Low
Exploitation
<1% chance of attack within 30 days
Timeline
Published12 Jan 2013
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2013-0154 · NVD
Track software like this
Free during beta