CVE-2013-2211 in Linux Foundation Xen
Summary
The libxenlight (libxl) toolstack library in Xen 4.0.x, 4.1.x, and 4.2.x uses weak permissions for xenstore keys for paravirtualised and emulated serial console devices, which allows local guest administrators to modify the xenstore value via unspecified vectors.
Reservation
02/19/2013
Disclosure
08/28/2013
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 9254 | Linux Foundation Xen Xenstore Keys libxenlight access control | 264 | Proof-of-Concept | Official fix | CVE-2013-2211 |