CVE-2013-6375
Xen 4.2.x and 4.3.x, when using Intel VT-d for PCI passthrough, does not properly flush the TLB...
Xen 4.2.x and 4.3.x, when using Intel VT-d for PCI passthrough, does not properly flush the TLB after clearing a present translation table entry, which allows local guest administrators to cause a denial of service or gain privileges via unspecified vectors related to an "inverted boolean parameter."
Exploit likelihood
What each source reports
NVD Score used
Xen 4.2.x and 4.3.x, when using Intel VT-d for PCI passthrough, does not properly flush the TLB after clearing a present translation table entry, which allows local guest administrators to cause a denial of service or gain privileges via unspecified vectors related to an "inverted boolean parameter."
- Record
CVE-2013-6375- CVSS 2.0
- 7.9 High
AV:A/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Xen 4.2.x and 4.3.x, when using Intel VT-d for PCI passthrough, does not properly flush the TLB after clearing a present translation table entry, which allows local guest administrators to cause a denial of service or gain privileges via unspecified vectors related to an "inverted boolean parameter."
- Record
CVE-2013-6375- Updated
- 2026-11-02
EUVDEUVD-2013-6200 No score
Xen 4.2.x and 4.3.x, when using Intel VT-d for PCI passthrough, does not properly flush the TLB after clearing a present translation table entry, which allows local guest administrators to cause a denial of service or gain privileges via unspecified vectors related to an "inverted boolean parameter."
- Record
EUVD-2013-6200- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2xpm-w5mr-rm8m No score
Xen 4.2.x and 4.3.x, when using Intel VT-d for PCI passthrough, does not properly flush the TLB...
Xen 4.2.x and 4.3.x, when using Intel VT-d for PCI passthrough, does not properly flush the TLB after clearing a present translation table entry, which allows local guest administrators to cause a denial of service or gain privileges via unspecified vectors related to an "inverted boolean parameter."
- Record
GHSA-2xpm-w5mr-rm8m- Updated
- 2026-11-02
OSV No score
Xen 4.2.x and 4.3.x, when using Intel VT-d for PCI passthrough, does not properly flush the TLB after clearing a present translation table entry, which allows local guest administrators to cause a denial of service or gain privileges via unspecified vectors related to an "inverted boolean parameter."
- Record
CVE-2013-6375- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-6375 No score
Xen 4.2.x and 4.3.x, when using Intel VT-d for PCI passthrough, does not properly flush the TLB after clearing a present translation table entry, which allows local guest administrators to cause a denial of service or gain privileges via unspecified vectors related to an "inverted boolean parameter."
- Record
DEBIAN-CVE-2013-6375- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-6375 is a high vulnerability (CVSS 7.9) in Xen, published November 23, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.39%, the 72nd percentile. Fixed in xen 4.4.0-1.
References
security.gentoo.org/glsa/glsa-201407-03.xml
openwall.com/lists/oss-security/2013/11/21/1
securitytracker.com/id/1029369
lists.opensuse.org/opensuse-updates/2013-12/msg00059.html
nvd.nist.gov/vuln/detail/CVE-2013-6375
github.com/advisories/GHSA-2xpm-w5mr-rm8m
security-tracker.debian.org/tracker/CVE-2013-6375