CVE-2013-4551
Fixed in a distro release EPSS <1%
Xen 4.2.x and 4.3.x, when nested virtualization is disabled, does not properly check the emulation paths for (1) VMLAUNCH and (2) VMRESUME, which allows local HVM guest users to cause a denial of service (host crash) via unspecified vectors related to "guest VMX instruction execution."
Products: xen
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | xen | 4.4.0-1 |
| Debian 13 | xen | 4.4.0-1 |
| Debian 14 | xen | 4.4.0-1 |
| openSUSE Tumbleweed | xen | 4.7.0_12-1.3 |