Bug 483218 – app-emulation/xen: Denial of Service (XSA-55) (CVE-2013-{2194,2195,2196})

• Status: RESOLVED DUPLICATE of bug 472214
• Product: Gentoo Security

[Description GLSAMaker/CVETool Bot 2013-09-01 00:13:41 UTC]

CVE-2013-2196 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2196):
  Multiple unspecified vulnerabilities in the Elf parser (libelf) in Xen 4.2.x
  and earlier allow local guest administrators with certain permissions to
  have an unspecified impact via a crafted kernel, related to "other problems"
  that are not CVE-2013-2194 or CVE-2013-2195.

CVE-2013-2195 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2195):
  The Elf parser (libelf) in Xen 4.2.x and earlier allow local guest
  administrators with certain permissions to have an unspecified impact via a
  crafted kernel, related to "pointer dereferences" involving unexpected
  calculations.

CVE-2013-2194 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-2194):
  Multiple integer overflows in the Elf parser (libelf) in Xen 4.2.x and
  earlier allow local guest administrators with certain permissions to have an
  unspecified impact via a crafted kernel.


"Unspecified impact" -> B?

[Comment 1 Chris Reffett (RETIRED) 2013-09-01 00:43:42 UTC]

Patches available at http://lists.xen.org/archives/html/xen-devel/2013-06/msg01626.html

[Comment 2 Agostino Sarubbo 2013-09-01 08:38:59 UTC]

See https://bugs.gentoo.org/show_bug.cgi?id=472214#c1 and https://bugs.gentoo.org/show_bug.cgi?id=472214#c2

[Comment 3 Chris Reffett (RETIRED) 2013-09-01 12:54:31 UTC]

*** This bug has been marked as a duplicate of bug 472214 ***