CVE-2013-6375 Privilege escalation in n/a
Local guest administrators can escalate privileges or cause denial of service in Xen hypervisors using Intel VT-d PCI passthrough due to improper TLB flushing.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2013-6375?
CVE-2013-6375 is a high-severity vulnerability in Opensuse Opensuse, published on 23 Nov 2013. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Xen 4.2.x and 4.3.x, when using Intel VT-d for PCI passthrough, does not properly flush the TLB after clearing a present translation table entry, which allows local guest administrators to cause a denial of service or gain privileges via unspecified vectors related to an "inverted boolean parameter."
Weakness: CWE-264
Which versions are affected by CVE-2013-6375?
It affects 2 products.
Products include Opensuse Opensuse, Xen Xen.
How do I fix CVE-2013-6375?
Apply the vendor's patch.
Is CVE-2013-6375 being exploited?
There is no known exploitation of CVE-2013-6375 in the wild and no public exploit code.
Other vulnerabilities in Opensuse Opensuse
Sources
Also known as DEBIAN-CVE-2013-6375, GHSA-2xpm-w5mr-rm8m.