CVE-2013-6375

Xen 4.2.x and 4.3.x, when using Intel VT-d for PCI passthrough, does not properly flush the TLB after clearing a present translation table entry, which allows local guest administrators to cause a denial of service or gain privileges via unspecified vectors related to an "inverted boolean parameter."

• CWE-264

• http://lists.opensuse.org/opensuse-updates/2013-12/msg00059.htmlThird Party Advisory
• http://security.gentoo.org/glsa/glsa-201407-03.xml
• http://www.openwall.com/lists/oss-security/2013/11/20/3Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2013/11/21/1Mailing List, Third Party Advisory
• http://www.securitytracker.com/id/1029369Third Party Advisory, VDB Entry
• http://lists.opensuse.org/opensuse-updates/2013-12/msg00059.htmlThird Party Advisory
• http://security.gentoo.org/glsa/glsa-201407-03.xml
• http://www.openwall.com/lists/oss-security/2013/11/20/3Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2013/11/21/1Mailing List, Third Party Advisory
• http://www.securitytracker.com/id/1029369Third Party Advisory, VDB Entry

Published

Nov 23, 2013

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-6369Stack-based buffer overflow in the jbg_dec_in function in li…
• CVE-2013-6370Buffer overflow in the printbuf APIs in json-c before 0.12 a…
• CVE-2013-6371The hash functionality in json-c before 0.12 allows context-…
• CVE-2013-6372The Subversion plugin before 1.54 for Jenkins stores credent…
• CVE-2013-6373The Exclusion plugin before 0.9 for Jenkins does not properl…
• CVE-2013-6374Cross-site scripting (XSS) vulnerability in the Build Failur…
• CVE-2013-6376The recalculate_apic_map function in arch/x86/kvm/lapic.c in…
• CVE-2013-6377Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2013-6378The lbs_debugfs_write function in drivers/net/wireless/liber…
• CVE-2013-6379Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2013-6380The aac_send_raw_srb function in drivers/scsi/aacraid/commct…
• CVE-2013-6381Buffer overflow in the qeth_snmp_command function in drivers…