Xen Page Table Manipulation CVE-2013-1918 Denial of Service Vulnerability

Bugtraq ID:	59615
Class:	Design Error
CVE:	CVE-2013-1918
Remote:	No
Local:	Yes
Published:	May 02 2013 12:00AM
Updated:	Apr 13 2015 09:49PM
Credit:	Xen
Vulnerable:	XenSource Xen 4.2.1 XenSource Xen 4.1.2 XenSource Xen 4.1.1 XenSource Xen 3.3.1 XenSource Xen 3.3 XenSource Xen 3.2 XenSource Xen 3.1.2 XenSource Xen 3.1.1 XenSource Xen 3.0.3 XenSource Xen 2.6.23 XenSource Xen 4.2 RC XenSource Xen 4.2 XenSource Xen 4.1 XenSource Xen 4.0 XenSource Xen 3.4 XenSource Xen 3.0 SuSE SUSE Linux Enterprise Server for VMware 11 SP2 + Linux kernel 2.6.5 SuSE SUSE Linux Enterprise Server 11 SP2 + Linux kernel 2.6.5 SuSE SUSE Linux Enterprise Server 11 SP1 LTSS + Linux kernel 2.6.5 + Linux kernel 2.6.5 SuSE SUSE Linux Enterprise SDK 11 SP2 SuSE Suse Linux Enterprise Desktop 11 SP2 + Linux kernel 2.6.5 S.u.S.E. openSUSE 12.3 S.u.S.E. openSUSE 12.2 Gentoo Linux Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 Citrix XenServer 6.1 Citrix XenServer 6.0 Citrix XenServer 5.6 Citrix XenServer 5.5 Citrix XenServer 5.0
Not Vulnerable:

Xen Page Table Manipulation CVE-2013-1918 Denial of Service Vulnerability

Xen is prone to a denial-of-service vulnerability.

Local attackers with access to a guest operating system can exploit this issue to crash the host operating system, effectively denying service to legitimate users.

Xen Page Table Manipulation CVE-2013-1918 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.