RETIRED: Xen 'ELF' Parser Multiple Security Vulnerabilities

Bugtraq ID:	60422
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Jun 07 2013 12:00AM
Updated:	Jun 21 2013 01:20PM
Credit:	Xen.org security team
Vulnerable:
Not Vulnerable:

RETIRED: Xen 'ELF' Parser Multiple Security Vulnerabilities

Xen is prone to multiple security vulnerabilities including integer-overflow and denial-of-service vulnerabilities.

Attackers can exploit these issues to load a malicious kernel or firmware, to corrupt the memory of libelf of Xen, and gain elevated privileges on the host system. Successful exploits may aid in further attacks.

This BID is being retired. The following individual records exist to better document the issues:

60701 Xen 'ELF' Parser CVE-2013-2195 Pointer Dereference Privilege Escalation Vulnerability
60702 Xen CVE-2013-2194 Remote Privilege Escalation Vulnerability
60703 Xen CVE-2013-2196 Remote Privilege Escalation Vulnerability

RETIRED: Xen 'ELF' Parser Multiple Security Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

RETIRED: Xen 'ELF' Parser Multiple Security Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

RETIRED: Xen 'ELF' Parser Multiple Security Vulnerabilities

References:

• Xen Project Homepage (Xen Project)
  
• Xen Security Advisory 55 - Multiple vulnerabilities in libelf PV kernel handling (Xen.org security team)
  
• Xen Security Advisory 55 - Multiple vulnerabilities in libelf PV kernel handling (Xen.org security team)