CVE-2013-4551
Xen 4.2.x and 4.3.x, when nested virtualization is disabled, does not properly check the...
Xen 4.2.x and 4.3.x, when nested virtualization is disabled, does not properly check the emulation paths for (1) VMLAUNCH and (2) VMRESUME, which allows local HVM guest users to cause a denial of service (host crash) via unspecified vectors related to "guest VMX instruction execution."
Exploit likelihood
What each source reports
NVD Score used
Xen 4.2.x and 4.3.x, when nested virtualization is disabled, does not properly check the emulation paths for (1) VMLAUNCH and (2) VMRESUME, which allows local HVM guest users to cause a denial of service (host crash) via unspecified vectors related to "guest VMX instruction execution."
- Record
CVE-2013-4551- CVSS 2.0
- 5.7 Medium
AV:A/AC:M/Au:N/C:N/I:N/A:C - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
Xen 4.2.x and 4.3.x, when nested virtualization is disabled, does not properly check the emulation paths for (1) VMLAUNCH and (2) VMRESUME, which allows local HVM guest users to cause a denial of service (host crash) via unspecified vectors related to "guest VMX instruction execution."
- Record
CVE-2013-4551- Updated
- 2026-11-02
EUVDEUVD-2013-4410 No score
Xen 4.2.x and 4.3.x, when nested virtualization is disabled, does not properly check the emulation paths for (1) VMLAUNCH and (2) VMRESUME, which allows local HVM guest users to cause a denial of service (host crash) via unspecified vectors related to "guest VMX instruction execution."
- Record
EUVD-2013-4410- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-x975-qcf7-3vh2 No score
Xen 4.2.x and 4.3.x, when nested virtualization is disabled, does not properly check the...
Xen 4.2.x and 4.3.x, when nested virtualization is disabled, does not properly check the emulation paths for (1) VMLAUNCH and (2) VMRESUME, which allows local HVM guest users to cause a denial of service (host crash) via unspecified vectors related to "guest VMX instruction execution."
- Record
GHSA-x975-qcf7-3vh2- Weakness
- CWE-20
- Updated
- 2026-11-02
OSV No score
Xen 4.2.x and 4.3.x, when nested virtualization is disabled, does not properly check the emulation paths for (1) VMLAUNCH and (2) VMRESUME, which allows local HVM guest users to cause a denial of service (host crash) via unspecified vectors related to "guest VMX instruction execution."
- Record
CVE-2013-4551- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-4551 No score
Xen 4.2.x and 4.3.x, when nested virtualization is disabled, does not properly check the emulation paths for (1) VMLAUNCH and (2) VMRESUME, which allows local HVM guest users to cause a denial of service (host crash) via unspecified vectors related to "guest VMX instruction execution."
- Record
DEBIAN-CVE-2013-4551- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10196-1 No score
xen-4.7.0_12-1.3 on GA media
These are all security issues fixed in the xen-4.7.0_12-1.3 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10196-1- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-4551 is a medium vulnerability (CVSS 5.7) in Xen, published November 15, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.80%, the 56th percentile. Fixed in xen 4.4.0-1.
References
exchange.xforce.ibmcloud.com/vulnerabilities/88649
securityfocus.com/bid/63625
security.gentoo.org/glsa/glsa-201407-03.xml
securitytracker.com/id/1029313
secunia.com/advisories/55398
lists.opensuse.org/opensuse-updates/2013-12/msg00059.html
Show 128 moreShow less
openwall.com/lists/oss-security/2013/11/11/1
nvd.nist.gov/vuln/detail/CVE-2013-4551
github.com/advisories/GHSA-x975-qcf7-3vh2
security-tracker.debian.org/tracker/CVE-2013-4551
suse.com/security/cve/CVE-2011-1898