CVE-2013-2194

Multiple integer overflows in the Elf parser (libelf) in Xen 4.2.x and earlier allow local guest...

6.9 MediumFix available

Multiple integer overflows in the Elf parser (libelf) in Xen 4.2.x and earlier allow local guest administrators with certain permissions to have an unspecified impact via a crafted kernel.

Exploit likelihood

0.38%Down 0.9 points since Feb 4, 2022

What each source reports

NVD Score used 6.9

Multiple integer overflows in the Elf parser (libelf) in Xen 4.2.x and earlier allow local guest administrators with certain permissions to have an unspecified impact via a crafted kernel.

Record: CVE-2013-2194
CVSS 2.0: 6.9 MediumAV:L/AC:M/Au:N/C:C/I:C/A:C
Weakness: CWE-189
Updated: 2026-11-02

CVE List No score

Multiple integer overflows in the Elf parser (libelf) in Xen 4.2.x and earlier allow local guest administrators with certain permissions to have an unspecified impact via a crafted kernel.

Record: CVE-2013-2194
Updated: 2026-11-02

EUVDEUVD-2013-2149 No score

Multiple integer overflows in the Elf parser (libelf) in Xen 4.2.x and earlier allow local guest administrators with certain permissions to have an unspecified impact via a crafted kernel.

Record: EUVD-2013-2149
Updated: 2026-11-03

GitHub AdvisoriesGHSA-h572-h4v9-r5h4 No score

Multiple integer overflows in the Elf parser (libelf) in Xen 4.2.x and earlier allow local guest...

Multiple integer overflows in the Elf parser (libelf) in Xen 4.2.x and earlier allow local guest administrators with certain permissions to have an unspecified impact via a crafted kernel.

Record: GHSA-h572-h4v9-r5h4
Updated: 2026-11-02

OSV No score

Multiple integer overflows in the Elf parser (libelf) in Xen 4.2.x and earlier allow local guest administrators with certain permissions to have an unspecified impact via a crafted kernel.

Record: CVE-2013-2194
Updated: 2026-11-02

OSVDEBIAN-CVE-2013-2194 No score

Multiple integer overflows in the Elf parser (libelf) in Xen 4.2.x and earlier allow local guest administrators with certain permissions to have an unspecified impact via a crafted kernel.

Record: DEBIAN-CVE-2013-2194
Updated: 2026-11-02

OSVMGASA-2013-0197 No score

Updated xen package fixes security issues

This update fixes the following security issues: XSA-52/CVE-2013-2076: Information leak on XSAVE/XRSTOR capable AMD CPUs XSA-53/CVE-2013-2077: Hypervisor crash due to missing exception recovery on XRSTOR XSA-54/CVE-2013-2078: Hypervisor crash due to missing exception recovery on XSETBV XSA-55/CVE-2013-2194: integer overflows XSA-55/CVE-2013-2195: pointer dereferences XSA-55/CVE-2013-2196: other problems XSA-56/CVE-2013-2072: Buffer overflow in xencontrol Python bindings affecting xend XSA-57/CVE-2013-2211: libxl allows guest write access to sensitive console related xenstore keys XSA-58/CVE-2013-1432: Page reference counting error due to XSA-45/CVE-2013-1918 fixes

Record: MGASA-2013-0197
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`xen` Debian:12	before 4.3.0-1	4.3.0-1
`xen` Debian:13	before 4.3.0-1	4.3.0-1
`xen` Debian:14	before 4.3.0-1	4.3.0-1
`xen` Debian:7 From an advisory covering 19 CVEs	before 4.1.4-3+deb7u2, plus listed versions 4.1.4-34.1.4-3+deb7u1	4.1.4-3+deb7u2
`xen` Mageia:3 From an advisory covering 9 CVEs	before 4.2.1-16.2.mga3	4.2.1-16.2.mga3

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2013-2194 is a medium vulnerability (CVSS 6.9) in Xen, published July 1, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 31st percentile. Fixed in xen 4.3.0-1.

References

Show 8 moreShow less