Patchwire CVEs, their patch status, and feeds to follow them

CVE-2013-1432

Fixed in a distro release EPSS <1%

Xen 4.1.x and 4.2.x, when the XSA-45 patch is in place, does not properly maintain references on pages stored for deferred cleanup, which allows local PV guest kernels to cause a denial of service (premature page free and hypervisor crash) or possibly gain privileges via unspecified vectors.

Published 2013-08-28 · CVE record · OSV

Products: xen

Distro releases

ReleasePackageFixed in
Debian 12xen4.3.0-1
Debian 13xen4.3.0-1
Debian 14xen4.3.0-1
Debian 7xen4.1.4-3+deb7u2