oxenstored in Xen 4.1.x, Xen 4.2.x, and xen-unstable does not properly consider the state of the Xenstore ring during read operations,…

Description

oxenstored in Xen 4.1.x, Xen 4.2.x, and xen-unstable does not properly consider the state of the Xenstore ring during read operations, which allows guest OS users to cause a denial of service (daemon crash and host-control outage, or memory consumption) or obtain sensitive control-plane data by leveraging guest administrative access.

Scores

EPSS (exploitation in 30 days)

0.59% · top 52% of all CVEs (6 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.3.

Weakness

• n/a
• CWE-264 (opens in a new tab)All about CWE-264 and its CVEs

Affected products

• n/a

  • affected n/a

References (5)

• 55082 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• http://xenbits.xen.org/gitweb/?p=xen.git%3Ba=commit%3Bh=40f9c5e0a6d15b4ca1f6d4ed3a46f0871520eab5 (opens in a new tab)x_refsource_CONFIRMx_transferred
• GLSA-201309-24 (opens in a new tab)vendor-advisoryx_refsource_GENTOOx_transferred
• [oss-security] 20130205 Xen Security Advisory 38 (CVE-2013-0215) - oxenstored incorrect handling of certain Xenbus ring states (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
• http://xenbits.xen.org/gitweb/?p=xen.git%3Ba=commit%3Bh=61401264eb00fae4ee4efc8e9a5067449283207b (opens in a new tab)x_refsource_CONFIRMx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2013-0215](https://trackcve.app/badge/CVE-2013-0215.svg)](https://trackcve.app/cve/CVE-2013-0215)

Record last updated 6 Aug 2024, 14:18 UTC.