Every CVE Search/ Get API key

CVE-2013-1918

Certain page table manipulation operations in Xen 4.1.x, 4.2.x, and earlier are not preemptible,...

4.7 MediumFix available

Certain page table manipulation operations in Xen 4.1.x, 4.2.x, and earlier are not preemptible, which allows local PV kernels to cause a denial of service via vectors related to "deep page table traversal."

Exploit likelihood

0.36%Down 0.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.7

Certain page table manipulation operations in Xen 4.1.x, 4.2.x, and earlier are not preemptible, which allows local PV kernels to cause a denial of service via vectors related to "deep page table traversal."

Record
CVE-2013-1918
CVSS 2.0
4.7 MediumAV:L/AC:M/Au:N/C:N/I:N/A:C
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

Certain page table manipulation operations in Xen 4.1.x, 4.2.x, and earlier are not preemptible, which allows local PV kernels to cause a denial of service via vectors related to "deep page table traversal."

Record
CVE-2013-1918
Updated
2026-11-02
EUVDEUVD-2013-1912 No score

Certain page table manipulation operations in Xen 4.1.x, 4.2.x, and earlier are not preemptible, which allows local PV kernels to cause a denial of service via vectors related to "deep page table traversal."

Record
EUVD-2013-1912
Updated
2026-11-03
GitHub AdvisoriesGHSA-vpwm-gh3g-c2m8 No score

Certain page table manipulation operations in Xen 4.1.x, 4.2.x, and earlier are not preemptible,...

Certain page table manipulation operations in Xen 4.1.x, 4.2.x, and earlier are not preemptible, which allows local PV kernels to cause a denial of service via vectors related to "deep page table traversal."

Record
GHSA-vpwm-gh3g-c2m8
Weakness
CWE-119
Updated
2026-11-02
OSV No score

Certain page table manipulation operations in Xen 4.1.x, 4.2.x, and earlier are not preemptible, which allows local PV kernels to cause a denial of service via vectors related to "deep page table traversal."

Record
CVE-2013-1918
Updated
2026-11-02
OSVDEBIAN-CVE-2013-1918 No score

Certain page table manipulation operations in Xen 4.1.x, 4.2.x, and earlier are not preemptible, which allows local PV kernels to cause a denial of service via vectors related to "deep page table traversal."

Record
DEBIAN-CVE-2013-1918
Updated
2026-11-02
OSVopenSUSE-SU-2024:10196-1 No score

xen-4.7.0_12-1.3 on GA media

These are all security issues fixed in the xen-4.7.0_12-1.3 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10196-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
xen
Debian:12
 before 4.1.4-4
4.1.4-4
xen
Debian:13
 before 4.1.4-4
4.1.4-4
xen
Debian:14
 before 4.1.4-4
4.1.4-4
xen
Debian:6.0
From an advisory covering 3 CVEs
 before 4.0.1-5.11, plus listed versions
4.0.1-24.0.1-44.0.1-54.0.1-5.14.0.1-5.10
Show 8 moreShow less
4.0.1-5.24.0.1-5.34.0.1-5.44.0.1-5.54.0.1-5.64.0.1-5.74.0.1-5.84.0.1-5.9
4.0.1-5.11
xen
Debian:7
From an advisory covering 3 CVEs
 before 4.1.4-3+deb7u1, plus listed versions
4.1.4-3
4.1.4-3+deb7u1
xen
openSUSE:Tumbleweed
From an advisory covering 124 CVEs
 before 4.7.0_12-1.3
4.7.0_12-1.3

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2013-1918 is a medium vulnerability (CVSS 4.7) in Xen, published May 12, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 30th percentile. Fixed in xen 4.1.4-4.

References

Show 129 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open