CVEvulnerability
CVE-2013-2211
7.4 HIGH
Official page ↗
- Status
- Modified
- Published
- 2013-08-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.4 HIGH — AV:A/AC:M/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
The libxenlight (libxl) toolstack library in Xen 4.0.x, 4.1.x, and 4.2.x uses weak permissions for xenstore keys for paravirtualised and emulated serial console devices, which allows local guest administrators to modify the xenstore value via unspecified vectors.
Affected configurations
• xen xen 4.2.0
• xen xen 4.2.1
• xen xen 4.2.2
• xen xen 4.1.0
• xen xen 4.1.1
• xen xen 4.1.2
• xen xen 4.1.3
• xen xen 4.1.4
• xen xen 4.1.5
• xen xen 4.0.0
• xen xen 4.0.1
• xen xen 4.0.2
• xen xen 4.0.3
• xen xen 4.0.4
Related
Weakness · not in database (1)
References
- http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html lists.opensuse.org
- http://secunia.com/advisories/55082 secunia.com
- http://security.gentoo.org/glsa/glsa-201309-24.xml security.gentoo.org
- http://www.debian.org/security/2014/dsa-3006 www.debian.org
- http://www.openwall.com/lists/oss-security/2013/06/25/1 www.openwall.com
- http://www.openwall.com/lists/oss-security/2013/06/26/4 www.openwall.com
- http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html lists.opensuse.org
- http://secunia.com/advisories/55082 secunia.com
- http://security.gentoo.org/glsa/glsa-201309-24.xml security.gentoo.org
- http://www.debian.org/security/2014/dsa-3006 www.debian.org
- http://www.openwall.com/lists/oss-security/2013/06/25/1 www.openwall.com
- http://www.openwall.com/lists/oss-security/2013/06/26/4 www.openwall.com