Servers and applications
CVE-2013-4356
Xen 4.3.x writes hypervisor mappings to certain shadow pagetables when live migration is performed on hosts with more than 5TB of RAM, which allows local 64-bit PV guests to read or write to invalid memory and cause a denial of service (crash).
- Severity
- Medium 5.4
- Published
- 9 Oct 2013
- Last changed
- 16 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Exploit chance
- 0.6% in the next 30 daysHigher than 49% of CVEs. EPSS by FIRST, 12 Nov 2026
- Weakness
- CWE-264
- Attack
- From the same local network · No login needed
- Attacker can
- Read some data · Change some data · Slow it down
- CVSS vector
AV:A/AC:M/Au:N/C:P/I:P/A:P- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
XenServers and applications · cpe:o:xen:xen |
|