CVE-2013-6375

Xen 4.2.x and 4.3.x, when using Intel VT-d for PCI passthrough, does not properly flush the TLB after clearing a present translation table entry, which allows local guest administrators to cause a denial of service or gain privileges via unspecified vectors related to an "inverted boolean parameter."

CVSS v2.0 NVD

7.9 HIGHAV:A/AC:M/Au:N/C:C/I:C/A:C

EPSS

1.39% chance of exploitation in the next 30 days, 72nd percentile

Published

2013-11-23

Updated

2024-08-06

Proof-of-concept exploits (1)

• bl4ck5un/cve-2013-63751★ · 2014-04-08

Security advisories

• http://lists.opensuse.org/opensuse-updates/2013-12/msg00059.html
• http://www.openwall.com/lists/oss-security/2013/11/20/3
• http://www.openwall.com/lists/oss-security/2013/11/21/1
• http://www.securitytracker.com/id/1029369

References

• CVE Record
• NVD entry

Related

• CVE-2013-2072
• CVE-2013-4348