CVE-2013-4369

Name of the Vulnerable Software and Affected Versions Xen versions 4.2.x through 4.3.x

Description The issue allows local users to cause a denial of service by exploiting a NULL pointer dereference in the xlu vif parse rate function. This can be achieved by using the "@" character as the VIF rate configuration.

Recommendations For Xen versions 4.2.x through 4.3.x, consider restricting the use of the xlu vif parse rate function until a patch is available to prevent the denial of service. Avoid using the "@" character in the VIF rate configuration to minimize the risk of exploitation.