CVE-2013-0215: Xen

Medium severity, CVSS 4.3. EPSS: 0.6% chance of exploitation in the next 30 days.

oxenstored in Xen 4.1.x, Xen 4.2.x, and xen-unstable does not properly consider the state of the Xenstore ring during read operations, which allows guest OS users to cause a denial of service (daemon crash and host-control outage, or memory consumption) or obtain sensitive control-plane data by leveraging guest administrative access.

Affected products

• Xen Xen: version 4.1.0 only; version 4.1.1 only; version 4.1.2 only; version 4.1.3 only; version 4.1.4 only; version 4.2.0 only; …

Published 2013-03-07. Last modified 2026-06-16.