Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 483218 (CVE-2013-2194)

Summary: app-emulation/xen: Denial of Service (XSA-55) (CVE-2013-{2194,2195,2196})
Product: Gentoo Security Reporter: GLSAMaker/CVETool Bot <glsamaker>
Component: VulnerabilitiesAssignee: Gentoo Security <security>
Status: RESOLVED DUPLICATE    
Severity: minor CC: idella4, xen
Priority: Normal    
Version: unspecified   
Hardware: All   
OS: Linux   
Whiteboard: B? [ebuild]
Package list:
Runtime testing required: ---

Description GLSAMaker/CVETool Bot gentoo-dev 2013-09-01 00:13:41 UTC
CVE-2013-2196 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2196):
  Multiple unspecified vulnerabilities in the Elf parser (libelf) in Xen 4.2.x
  and earlier allow local guest administrators with certain permissions to
  have an unspecified impact via a crafted kernel, related to "other problems"
  that are not CVE-2013-2194 or CVE-2013-2195.

CVE-2013-2195 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2195):
  The Elf parser (libelf) in Xen 4.2.x and earlier allow local guest
  administrators with certain permissions to have an unspecified impact via a
  crafted kernel, related to "pointer dereferences" involving unexpected
  calculations.

CVE-2013-2194 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2194):
  Multiple integer overflows in the Elf parser (libelf) in Xen 4.2.x and
  earlier allow local guest administrators with certain permissions to have an
  unspecified impact via a crafted kernel.


"Unspecified impact" -> B?
Comment 1 Chris Reffett (RETIRED) gentoo-dev Security 2013-09-01 00:43:42 UTC
Patches available at http://lists.xen.org/archives/html/xen-devel/2013-06/msg01626.html
Comment 3 Chris Reffett (RETIRED) gentoo-dev Security 2013-09-01 12:54:31 UTC

*** This bug has been marked as a duplicate of bug 472214 ***