CVE-2013-4355: Xen

Low severity, CVSS 1.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Xen 4.3.x and earlier does not properly handle certain errors, which allows local HVM guests to obtain hypervisor stack memory via a (1) port or (2) memory mapped I/O write or (3) other unspecified operations related to addresses without associated memory.

Affected products

• Xen Xen: up to and including 4.3.0; version 3.0.2 only; version 3.0.3 only; version 3.0.4 only; version 3.1.3 only; version 3.1.4 only; …

Published 2013-10-01. Last modified 2026-06-16.