CVE-2013-1917: Xen

Low severity, CVSS 1.9. EPSS: 0.4% chance of exploitation in the next 30 days.

Xen 3.1 through 4.x, when running 64-bit hosts on Intel CPUs, does not clear the NT flag when using an IRET after a SYSENTER instruction, which allows PV guest users to cause a denial of service (hypervisor crash) by triggering a #GP fault, which is not properly handled by another IRET instruction.

Affected products

• Xen Xen: version 3.1.3 only; version 3.1.4 only; version 3.2.0 only; version 3.2.1 only; version 3.2.2 only; version 3.2.3 only; …

Published 2013-05-13. Last modified 2026-06-16.