CVE-2013-2212
EPSS 0.18%
Description
The vmx_set_uc_mode function in Xen 3.3 through 4.3, when disabling caches, allows local HVM guests with access to memory mapped I/O regions to cause a denial of service (CPU consumption and possibly hypervisor or guest kernel panic) via a crafted GFN range.
How to fix CVE-2013-2212
To remediate CVE-2013-2212, upgrade the affected package to a fixed version below.
- Debian/xen—upgrade to 4.3.0-1 or later
Is CVE-2013-2212 being exploited?
Low — EPSS is 0.2%, meaning exploitation activity has not been observed at scale.
Affected packages (1)
- from 0, < 4.3.0-1