CVE-2013-2211

2013-08-2800:00:00

ubuntu.com

7.4 High

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:M/Au:S/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

26.7%

JSON

The libxenlight (libxl) toolstack library in Xen 4.0.x, 4.1.x, and 4.2.x
uses weak permissions for xenstore keys for paravirtualised and emulated
serial console devices, which allows local guest administrators to modify
the xenstore value via unspecified vectors.

Notes

Author	Note
seth-arnold	Vulnerable interface added in 4.0 XSA-57

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchxen< 4.1.2-2ubuntu2.10UNKNOWN
ubuntu12.10noarchxen< 4.1.3-3ubuntu1.7UNKNOWN
ubuntu13.04noarchxen< 4.2.1-0ubuntu3.3UNKNOWN