PT-2013-2161 · Xen · Xen

Published 2013-03-07 · Updated 2023-02-13 · CVE-2013-0215

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:A/AC:M/Au:N/C:P/I:N/A:P

Name of the Vulnerable Software and Affected Versions Xen versions 4.1.x through 4.2.x Xen version xen-unstable

Description The issue allows guest OS users with administrative access to cause a denial of service, resulting in a daemon crash and host-control outage, or memory consumption. It also enables them to obtain sensitive control-plane data by exploiting the improper consideration of the Xenstore ring state during read operations.

Recommendations For Xen versions 4.1.x through 4.2.x, and xen-unstable, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2013-0215

Affected Products

Xen

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2013-0215 · Security Note
• http://security.gentoo.org/glsa/glsa-201309-24.xml · Vendor Advisory
• http://secunia.com/advisories/55082 · Note
• http://xenbits.xen.org/gitweb/?p=xen.git%3Ba=commit%3Bh=40f9c5e0a6d15b4ca1f6d4ed3a46f0871520eab5 · Note
• http://openwall.com/lists/oss-security/2013/02/05/10 · Note
• http://xenbits.xen.org/gitweb/?p=xen.git%3Ba=commit%3Bh=61401264eb00fae4ee4efc8e9a5067449283207b · Note