VULNERABILITY INTELLIGENCE
CVE-2013-4355
CVSS score1.5 LOW
EPSS probability0.31%
CISA KEVNot currently listed
Published2013-10-01
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:S/C:P/I:N/A:N
Description
Xen 4.3.x and earlier does not properly handle certain errors, which allows local HVM guests to obtain hypervisor stack memory via a (1) port or (2) memory mapped I/O write or (3) other unspecified operations related to addresses without associated memory.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor