CVE-2013-6375

HighCVSS 7.9/10Last modified Jun 17, 2026

Description

Xen 4.2.x and 4.3.x, when using Intel VT-d for PCI passthrough, does not properly flush the TLB after clearing a present translation table entry, which allows local guest administrators to cause a denial of service or gain privileges via unspecified vectors related to an "inverted boolean parameter."

Metrics

CVSS 2.0 7.9/10AV:A/AC:M/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-264

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.opensuse.org/opensuse-updates/2013-12/msg00059.htmlThird Party Advisory
http://security.gentoo.org/glsa/glsa-201407-03.xml
http://www.openwall.com/lists/oss-security/2013/11/20/3Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2013/11/21/1Mailing List, Third Party Advisory
http://www.securitytracker.com/id/1029369Third Party Advisory, VDB Entry
http://lists.opensuse.org/opensuse-updates/2013-12/msg00059.htmlThird Party Advisory
http://security.gentoo.org/glsa/glsa-201407-03.xml
http://www.openwall.com/lists/oss-security/2013/11/20/3Mailing List, Third Party Advisory
http://www.openwall.com/lists/oss-security/2013/11/21/1Mailing List, Third Party Advisory
http://www.securitytracker.com/id/1029369Third Party Advisory, VDB Entry

Timeline

Published: Nov 23, 2013
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-63765.2The recalculate_apic_map function in arch/x86/kvm/lapic.c in the KVM subsystem in the Linux kernel through 3.12.5 allows guest OS users to c CVE-2013-63784.4The lbs_debugfs_write function in drivers/net/wireless/libertas/debugfs.c in the Linux kernel through 3.12.1 allows local users to cause a d CVE-2013-63804.7The aac_send_raw_srb function in drivers/scsi/aacraid/commctrl.c in the Linux kernel through 3.12.1 does not properly validate a certain siz CVE-2013-63816.9Buffer overflow in the qeth_snmp_command function in drivers/s390/net/qeth_core_main.c in the Linux kernel through 3.12.1 allows local users CVE-2013-63824.0Multiple buffer underflows in the XFS implementation in the Linux kernel through 3.12.1 allow local users to cause a denial of service (memo CVE-2013-63836.9The aac_compat_ioctl function in drivers/scsi/aacraid/linit.c in the Linux kernel before 3.11.8 does not require the CAP_SYS_RAWIO capabilit CVE-2013-63841.9(1) impl_db2.py and (2) impl_mongodb.py in OpenStack Ceilometer 2013.2 and earlier, when the logging level is set to INFO, logs the connecti CVE-2013-63855.1The form API in Drupal 6.x before 6.29 and 7.x before 7.24, when used with unspecified third-party modules, performs form validation even wh CVE-2013-63866.8Drupal 6.x before 6.29 and 7.x before 7.24 uses the PHP mt_rand function to generate random numbers, which uses predictable seeds and allows CVE-2013-63872.1Cross-site scripting (XSS) vulnerability in the Image module in Drupal 7.x before 7.24 allows remote authenticated users with certain permis CVE-2013-63884.3Cross-site scripting (XSS) vulnerability in the Color module in Drupal 7.x before 7.24 allows remote attackers to inject arbitrary web scrip CVE-2013-63895.8Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.24 allows remote attackers to redirect users to arbitrary web sites