CVE-2013-2211 | BDVDB-2026-57159 Detail
Description#
The libxenlight (libxl) toolstack library in Xen 4.0.x, 4.1.x, and 4.2.x uses weak permissions for xenstore keys for paravirtualised and emulated serial console devices, which allows local guest administrators to modify the xenstore value via unspecified vectors.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://secunia.com/advisories/55082
- http://www.openwall.com/lists/oss-security/2013/06/26/4
- http://security.gentoo.org/glsa/glsa-201309-24.xml
- http://www.openwall.com/lists/oss-security/2013/06/25/1
- http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html
- http://www.debian.org/security/2014/dsa-3006
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.