Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
1.9
CVE-2013-0154: Xen 4.2 can crash if debug mode is on
CVE-2013-0154 · published 13 years ago
Summary
In Xen version 4.2, a debugging feature can be abused by a guest machine's administrator to make the hypervisor stop working. This happens when a special request from the guest triggers an internal check that fails, causing the whole system to halt. Disable debugging mode or upgrade to a newer Xen release to prevent the crash.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| xen | xen |
4.2.0 cpe:2.3:o:xen:xen:4.2.0:*:*:*:*:*:*:* |
Original advisory text
The get_page_type function in xen/arch/x86/mm.c in Xen 4.2, when debugging is enabled, allows local PV or HVM guest administrators to cause a denial of service (assertion failure and hypervisor cra...
The get_page_type function in xen/arch/x86/mm.c in Xen 4.2, when debugging is enabled, allows local PV or HVM guest administrators to cause a denial of service (assertion failure and hypervisor crash) via unspecified vectors related to a hypercall.
References
- http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html
- http://lists.opensuse.org/opensuse-updates/2013-04/msg00051.html
- http://lists.opensuse.org/opensuse-updates/2013-04/msg00052.html
- http://osvdb.org/88913
- http://seclists.org/oss-sec/2013/q1/att-17/xsa37-4_2.patch
- http://secunia.com/advisories/55082
- http://security.gentoo.org/glsa/glsa-201309-24.xml
- http://www.openwall.com/lists/oss-security/2013/01/04/2
- http://www.securityfocus.com/bid/57159
- http://www.securitytracker.com/id?1027937
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80977
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Severity
1.9
Low
Timeline
Published12 Jan 2013
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2013-0154 · NVD
Track software like this
Free during beta