CVE-2013-1943

The KVM subsystem in the Linux kernel before 3.0 does not check whether kernel addresses are specified during allocation of memory slots for use in a guest's physical address space, which allows local users to gain privileges or obtain sensitive information from kernel memory via a crafted application, related to arch/x86/kvm/paging_tmpl.h and virt/kvm/kvm_main.c.

• CWE-20

• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fa3d315a4ce2c0891cdde262562e710d95fba19e
• http://web.archive.org/web/20130329070349/http://ftp.osuosl.org/pub/linux/kernel/v3.0/ChangeLog-3.0Broken Link
• http://www.ubuntu.com/usn/USN-1939-1Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=950490Issue Tracking, Patch, Third Party Advisory
• https://github.com/torvalds/linux/commit/fa3d315a4ce2c0891cdde262562e710d95fba19ePatch, Third Party Advisory
• http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fa3d315a4ce2c0891cdde262562e710d95fba19e
• http://web.archive.org/web/20130329070349/http://ftp.osuosl.org/pub/linux/kernel/v3.0/ChangeLog-3.0Broken Link
• http://www.ubuntu.com/usn/USN-1939-1Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=950490Issue Tracking, Patch, Third Party Advisory
• https://github.com/torvalds/linux/commit/fa3d315a4ce2c0891cdde262562e710d95fba19ePatch, Third Party Advisory

Published

Jul 16, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-1937Multiple cross-site scripting (XSS) vulnerabilities in tbl_g…
• CVE-2013-1938Zimbra 2013 has XSS in aspell.php6.1
• CVE-2013-1939The HTML\Browser plugin in SabreDAV before 1.6.9, 1.7.x befo…
• CVE-2013-1940X.Org X server before 1.13.4 and 1.4.x before 1.14.1 does no…
• CVE-2013-1941The installation routine in ownCloud Server before 4.0.14, 4…
• CVE-2013-1942Multiple cross-site scripting (XSS) vulnerabilities in actio…
• CVE-2013-1944The tailMatch function in cookie.c in cURL and libcurl befor…
• CVE-2013-1945ruby193 uses an insecure LD_LIBRARY_PATH setting.3.3
• CVE-2013-1946The RESTful Web Services (RESTWS) module 7.x-1.x before 7.x-…
• CVE-2013-1947kelredd-pruview gem 0.3.8 for Ruby allows context-dependent …
• CVE-2013-1948converter.rb in the md2pdf gem 0.0.1 for Ruby allows context…
• CVE-2013-1949Social Media Widget (social-media-widget) plugin 4.0 for Wor…