CVE-2013-4371

no score yetEPSS 0.4%

xen xen: no CVSS score yet. EPSS 0.4% chance of exploitation in the next 30 days.

Use-after-free vulnerability in the libxl_list_cpupool function in the libxl toolstack library in Xen 4.2.x and 4.3.x, when running "under memory pressure," returns the original pointer when the realloc function fails, which allows local users to cause a denial of service (heap corruption and crash) and possibly execute arbitrary code via unspecified vectors.

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 34% of CVEs (scores of 2026-10-31)
CWE: CWE-399
Published: 2013-10-17
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

xen:xen

References

http://security.gentoo.org/glsa/glsa-201407-03.xml
http://www.openwall.com/lists/oss-security/2013/10/10/12
http://security.gentoo.org/glsa/glsa-201407-03.xml
http://www.openwall.com/lists/oss-security/2013/10/10/12

Check your stack JSON