CVE-2013-2195

2013-08-2300:00:00

ubuntu.com

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

28.6%

JSON

The Elf parser (libelf) in Xen 4.2.x and earlier allow local guest
administrators with certain permissions to have an unspecified impact via a
crafted kernel, related to “pointer dereferences” involving unexpected
calculations.

Notes

Author	Note
mdeslaur	XSA-55

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchxen< 4.1.2-2ubuntu2.10UNKNOWN
ubuntu12.10noarchxen< 4.1.3-3ubuntu1.7UNKNOWN
ubuntu13.04noarchxen< 4.2.1-0ubuntu3.3UNKNOWN
ubuntu13.10noarchxen< 4.2.1-2ubuntu2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	12.04	noarch	xen	< 4.1.2-2ubuntu2.10	UNKNOWN
ubuntu	12.10	noarch	xen	< 4.1.3-3ubuntu1.7	UNKNOWN
ubuntu	13.04	noarch	xen	< 4.2.1-0ubuntu3.3	UNKNOWN
ubuntu	13.10	noarch	xen	< 4.2.1-2ubuntu2	UNKNOWN