CVE-2013-3495
published 2013-08-28CVE-2013-3495: The Intel VT-d Interrupt Remapping engine in Xen 3.3.x through 4.3.x allows local guests to cause a denial of service (kernel panic) via a malformed Message…
PriorityP411medium4.7CVSS 2.0
AVLACMAuNCNINAC
EPSS
0.39%
31.0th percentile
The Intel VT-d Interrupt Remapping engine in Xen 3.3.x through 4.3.x allows local guests to cause a denial of service (kernel panic) via a malformed Message Signaled Interrupt (MSI) from a PCI device that is bus mastering capable that triggers a System Error Reporting (SERR) Non-Maskable Interrupt (NMI).
Affected
30 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | xen | < xen 4.4.1-3 (bookworm) | xen 4.4.1-3 (bookworm) |
| opensuse | opensuse | — | — |
| opensuse | opensuse | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
| xen | xen | — | — |
CVSS provenance
nvdv2.04.7MEDIUMAV:L/AC:M/Au:N/C:N/I:N/A:C
osv4.7MEDIUM
vendor_debian4.7LOW
vendor_redhat4.7MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-6hmm-m7qc-9hw4: The Intel VT-d Interrupt Remapping engine in Xen 3
ghsa_unreviewed·2022-05-14
CVE-2013-3495 [MEDIUM] GHSA-6hmm-m7qc-9hw4: The Intel VT-d Interrupt Remapping engine in Xen 3
The Intel VT-d Interrupt Remapping engine in Xen 3.3.x through 4.3.x allows local guests to cause a denial of service (kernel panic) via a malformed Message Signaled Interrupt (MSI) from a PCI device that is bus mastering capable that triggers a System Error Reporting (SERR) Non-Maskable Interrupt (NMI).
OSV
CVE-2013-3495: The Intel VT-d Interrupt Remapping engine in Xen 3
osv·2013-08-28·CVSS 4.7
CVE-2013-3495 [MEDIUM] CVE-2013-3495: The Intel VT-d Interrupt Remapping engine in Xen 3
The Intel VT-d Interrupt Remapping engine in Xen 3.3.x through 4.3.x allows local guests to cause a denial of service (kernel panic) via a malformed Message Signaled Interrupt (MSI) from a PCI device that is bus mastering capable that triggers a System Error Reporting (SERR) Non-Maskable Interrupt (NMI).
Red Hat
hw: virt: Intel VT-d Interrupt Remapping engines can be evaded by native NMI interrupts
vendor_redhat·2013-08-20·CVSS 4.7
CVE-2013-3495 [MEDIUM] CWE-226 hw: virt: Intel VT-d Interrupt Remapping engines can be evaded by native NMI interrupts
hw: virt: Intel VT-d Interrupt Remapping engines can be evaded by native NMI interrupts
The Intel VT-d Interrupt Remapping engine in Xen 3.3.x through 4.3.x allows local guests to cause a denial of service (kernel panic) via a malformed Message Signaled Interrupt (MSI) from a PCI device that is bus mastering capable that triggers a System Error Reporting (SERR) Non-Maskable Interrupt (NMI).
Statement: This is hardware issue related to Intel VT-d, affecting all hypervisors (such as Xen and KVM) using Intel VT-d for guest PCI passthrough.
Package: kernel-xen (Red Hat Enterprise Linux 5) - Affected
Debian
CVE-2013-3495: xen - The Intel VT-d Interrupt Remapping engine in Xen 3.3.x through 4.3.x allows loca...
vendor_debian·2013·CVSS 4.7
CVE-2013-3495 [MEDIUM] CVE-2013-3495: xen - The Intel VT-d Interrupt Remapping engine in Xen 3.3.x through 4.3.x allows loca...
The Intel VT-d Interrupt Remapping engine in Xen 3.3.x through 4.3.x allows local guests to cause a denial of service (kernel panic) via a malformed Message Signaled Interrupt (MSI) from a PCI device that is bus mastering capable that triggers a System Error Reporting (SERR) Non-Maskable Interrupt (NMI).
Scope: local
bookworm: resolved (fixed in 4.4.1-3)
bullseye: resolved (fixed in 4.4.1-3)
forky: resolved (fixed in 4.4.1-3)
sid: resolved (fixed in 4.4.1-3)
trixie: resolved (fixed in 4.4.1-3)
No detection rules found.
No public exploits indexed.
http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00005.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-02/msg00010.htmlhttp://osvdb.org/96438http://secunia.com/advisories/54341http://www.openwall.com/lists/oss-security/2013/08/20/8http://www.securityfocus.com/bid/61854http://www.securitytracker.com/id/1028931https://security.gentoo.org/glsa/201504-04http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00005.htmlhttp://lists.opensuse.org/opensuse-security-announce/2015-02/msg00010.htmlhttp://osvdb.org/96438http://secunia.com/advisories/54341http://www.openwall.com/lists/oss-security/2013/08/20/8http://www.securityfocus.com/bid/61854http://www.securitytracker.com/id/1028931https://security.gentoo.org/glsa/201504-04
2013-08-28
Published