CVE-2013-4375
xen: qemu disk backend (qdisk) resource leak (XSA-71)
Severity
ModerateRed Hat Product Security
CVSS 2.0
Review impact separately from score.
Published · October 10, 2013
Updated · November 21, 2025
Description
The qdisk PV disk backend in qemu-xen in Xen 4.2.x and 4.3.x before 4.3.1, and qemu 1.1 and other versions, allows local HVM guests to cause a denial of service (domain grant reference consumption) via unspecified vectors.
Statement
Not vulnerable.
This issue does not affect the versions of the xen package as shipped with Red Hat Enterprise Linux 5 as it does not provide support for the qdisk PV backend.
This issue does not affect the versions of qemu-kvm as shipped with Red Hat Enterprise Linux 6 as they did not include the upstream commit that introduced this flaw.
This issue does not affect Red Hat Enterprise MRG 2.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 2.0 · 2.3AV:A/AC:M/Au:S/C:N/I:N/A:P
CWE not specified