VULNERABILITY INTELLIGENCE

CVE-2013-4494

CVSS score5.2 MEDIUM
EPSS probability0.67%
CISA KEVNot currently listed
Published2013-11-02
Last modified2026-06-16
CVSS vectorAV:A/AC:M/Au:S/C:N/I:N/A:C

Description

Xen before 4.1.x, 4.2.x, and 4.3.x does not take the page_alloc_lock and grant_table.lock in the same order, which allows local guest administrators with access to multiple vcpus to cause a denial of service (host deadlock) via unspecified vectors.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references