CVE-2013-2211

Description

The libxenlight (libxl) toolstack library in Xen 4.0.x, 4.1.x, and 4.2.x uses weak permissions for xenstore keys for paravirtualised and emulated serial console devices, which allows local guest administrators to modify the xenstore value via unspecified vectors.

Risk Information

Base Score

6.0

MODERATE

Vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

EPSS Score

Exploitation Probability

0.233

Associated Vulnerability

No records found

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234