Create an account

Subscribe to LWN

Shumway lands in Firefox

LWN.net Weekly Edition for October 3, 2013

Integrity and embedded devices

NUMA scheduling progress

LWN.net Weekly Edition for September 26, 2013

Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

xen: multiple vulnerabilities

Package(s):

xen

CVE #(s):

CVE-2013-2211 CVE-2013-1432

Created:

July 2, 2013

Updated:

July 19, 2013

Description:

From the Mageia advisory:

CVE-2013-2211: libxl allows guest write access to sensitive console related xenstore keys

CVE-2013-1432: Page reference counting error due to XSA-45/CVE-2013-1918 fixes

Alerts:

Mageia	MGASA-2013-0197	2013-07-01
Fedora	FEDORA-2013-11837	2013-07-03
Fedora	FEDORA-2013-11768	2013-07-06
Fedora	FEDORA-2013-11785	2013-07-06
Fedora	FEDORA-2013-11874	2013-07-07
Fedora	FEDORA-2013-11871	2013-07-07
CentOS	2013:X003	2013-07-18
SUSE	SUSE-SU-2013:1314-1	2013-08-09
openSUSE	openSUSE-SU-2013:1392-1	2013-08-30
openSUSE	openSUSE-SU-2013:1404-1	2013-09-04
Gentoo	201309-24	2013-09-27

(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds