CVE-2013-4356
Xen 4.3.x writes hypervisor mappings to certain shadow pagetables when live migration is...
Xen 4.3.x writes hypervisor mappings to certain shadow pagetables when live migration is performed on hosts with more than 5TB of RAM, which allows local 64-bit PV guests to read or write to invalid memory and cause a denial of service (crash).
Exploit likelihood
What each source reports
NVD Score used
Xen 4.3.x writes hypervisor mappings to certain shadow pagetables when live migration is performed on hosts with more than 5TB of RAM, which allows local 64-bit PV guests to read or write to invalid memory and cause a denial of service (crash).
- Record
CVE-2013-4356- CVSS 2.0
- 5.4 Medium
AV:A/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Xen 4.3.x writes hypervisor mappings to certain shadow pagetables when live migration is performed on hosts with more than 5TB of RAM, which allows local 64-bit PV guests to read or write to invalid memory and cause a denial of service (crash).
- Record
CVE-2013-4356- Updated
- 2026-11-02
EUVDEUVD-2013-4240 No score
Xen 4.3.x writes hypervisor mappings to certain shadow pagetables when live migration is performed on hosts with more than 5TB of RAM, which allows local 64-bit PV guests to read or write to invalid memory and cause a denial of service (crash).
- Record
EUVD-2013-4240- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-c4mh-mf74-4fcf No score
Xen 4.3.x writes hypervisor mappings to certain shadow pagetables when live migration is...
Xen 4.3.x writes hypervisor mappings to certain shadow pagetables when live migration is performed on hosts with more than 5TB of RAM, which allows local 64-bit PV guests to read or write to invalid memory and cause a denial of service (crash).
- Record
GHSA-c4mh-mf74-4fcf- Updated
- 2026-11-02
OSV No score
Xen 4.3.x writes hypervisor mappings to certain shadow pagetables when live migration is performed on hosts with more than 5TB of RAM, which allows local 64-bit PV guests to read or write to invalid memory and cause a denial of service (crash).
- Record
CVE-2013-4356- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-4356 No score
Xen 4.3.x writes hypervisor mappings to certain shadow pagetables when live migration is performed on hosts with more than 5TB of RAM, which allows local 64-bit PV guests to read or write to invalid memory and cause a denial of service (crash).
- Record
DEBIAN-CVE-2013-4356- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10196-1 No score
xen-4.7.0_12-1.3 on GA media
These are all security issues fixed in the xen-4.7.0_12-1.3 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10196-1- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-4356 is a medium vulnerability (CVSS 5.4) in Xen, published October 9, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.61%, the 49th percentile. Fixed in xen 4.4.0-1.
References
secunia.com/advisories/54962
security.gentoo.org/glsa/glsa-201407-03.xml
openwall.com/lists/oss-security/2013/09/30/2
securityfocus.com/bid/62709
nvd.nist.gov/vuln/detail/CVE-2013-4356
github.com/advisories/GHSA-c4mh-mf74-4fcf
Show 125 moreShow less
security-tracker.debian.org/tracker/CVE-2013-4356
suse.com/security/cve/CVE-2011-1898