CVE-2013-1952
Fixed in a distro release EPSS <1%
Xen 4.x, when using Intel VT-d for a bus mastering capable PCI device, does not properly check the source when accessing a bridge device's interrupt remapping table entries for MSI interrupts, which allows local guest domains to cause a denial of service (interrupt injection) via unspecified vectors.
Products: xen
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | xen | 4.1.4-4 |
| Debian 13 | xen | 4.1.4-4 |
| Debian 14 | xen | 4.1.4-4 |
| Debian 6.0 | xen | 4.0.1-5.11 |
| Debian 7 | xen | 4.1.4-3+deb7u1 |
| openSUSE Tumbleweed | xen | 4.7.0_12-1.3 |