#VU33878 Input validation error in Xen - CVE-2013-2194

Vulnerability identifier: #VU33878

Vulnerability risk: High

CVSSv4.0: 6.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2013-2194

CWE-ID: CWE-20

Exploitation vector: Network

Exploit availability: No

Vulnerable software:
Xen
Server applications / Virtualization software

Vendor: Xen Project

Description

The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

Multiple integer overflows in the Elf parser (libelf) in Xen 4.2.x and earlier allow local guest administrators with certain permissions to have an unspecified impact via a crafted kernel.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Xen: 4.24

---

External links
https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00015.html
https://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html
https://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html
https://secunia.com/advisories/55082
https://security.gentoo.org/glsa/glsa-201309-24.xml
https://support.citrix.com/article/CTX138058
https://www.debian.org/security/2014/dsa-3006
https://www.openwall.com/lists/oss-security/2013/06/20/2
https://www.openwall.com/lists/oss-security/2013/06/20/4

---

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.