{"action":"Upgrade xen to 4.1.4-3 or later.","affected":[{"fixed":"4.1.4-3","introduced":"0"}],"component":"xen","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["4.1.4-3"],"id":"tcs_01M5NABJW6Y8SMBRXCXFF9A2W6","modified_at":"2026-09-01T20:03:15.165082467Z","published_at":"2013-05-13T23:55:01.757Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2013-1917","https://security-tracker.debian.org/tracker/CVE-2013-1917"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2013-1917#Debian:14/xen","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2013-1917"}],"summary":"Xen 3.1 through 4.x, when running 64-bit hosts on Intel CPUs, does not clear the NT flag when using an IRET after a SYSENTER instruction, which allows PV guest users to cause a denial of service (hype"}