CVE Database›Document archive›CVE-2013-4375

CVE-2013-4375

xen: qemu disk backend (qdisk) resource leak (XSA-71)

Loading…

Severity

Moderate

Red Hat Product Security

2.3

CVSS 2.0

Review impact separately from score.

Published · October 10, 2013

Updated · November 21, 2025

Description

The qdisk PV disk backend in qemu-xen in Xen 4.2.x and 4.3.x before 4.3.1, and qemu 1.1 and other versions, allows local HVM guests to cause a denial of service (domain grant reference consumption) via unspecified vectors.

Statement

Not vulnerable.

This issue does not affect the versions of the xen package as shipped with Red Hat Enterprise Linux 5 as it does not provide support for the qdisk PV backend.

This issue does not affect the versions of qemu-kvm as shipped with Red Hat Enterprise Linux 6 as they did not include the upstream commit that introduced this flaw.

This issue does not affect Red Hat Enterprise MRG 2.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 2.0 · 2.3
AV:A/AC:M/Au:S/C:N/I:N/A:P

CWE not specified