CVE-2013-2195
The Elf parser (libelf) in Xen 4.2.x and earlier allow local guest administrators with certain...
The Elf parser (libelf) in Xen 4.2.x and earlier allow local guest administrators with certain permissions to have an unspecified impact via a crafted kernel, related to "pointer dereferences" involving unexpected calculations.
Exploit likelihood
What each source reports
NVD Score used
The Elf parser (libelf) in Xen 4.2.x and earlier allow local guest administrators with certain permissions to have an unspecified impact via a crafted kernel, related to "pointer dereferences" involving unexpected calculations.
- Record
CVE-2013-2195- CVSS 2.0
- 6.9 Medium
AV:L/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE List No score
The Elf parser (libelf) in Xen 4.2.x and earlier allow local guest administrators with certain permissions to have an unspecified impact via a crafted kernel, related to "pointer dereferences" involving unexpected calculations.
- Record
CVE-2013-2195- Updated
- 2026-11-02
EUVDEUVD-2013-2150 No score
The Elf parser (libelf) in Xen 4.2.x and earlier allow local guest administrators with certain permissions to have an unspecified impact via a crafted kernel, related to "pointer dereferences" involving unexpected calculations.
- Record
EUVD-2013-2150- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8xm4-2qhp-6g6g No score
The Elf parser (libelf) in Xen 4.2.x and earlier allow local guest administrators with certain...
The Elf parser (libelf) in Xen 4.2.x and earlier allow local guest administrators with certain permissions to have an unspecified impact via a crafted kernel, related to "pointer dereferences" involving unexpected calculations.
- Record
GHSA-8xm4-2qhp-6g6g- Updated
- 2026-11-02
OSV No score
The Elf parser (libelf) in Xen 4.2.x and earlier allow local guest administrators with certain permissions to have an unspecified impact via a crafted kernel, related to "pointer dereferences" involving unexpected calculations.
- Record
CVE-2013-2195- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-2195 No score
The Elf parser (libelf) in Xen 4.2.x and earlier allow local guest administrators with certain permissions to have an unspecified impact via a crafted kernel, related to "pointer dereferences" involving unexpected calculations.
- Record
DEBIAN-CVE-2013-2195- Updated
- 2026-11-02
OSVMGASA-2013-0197 No score
Updated xen package fixes security issues
This update fixes the following security issues: XSA-52/CVE-2013-2076: Information leak on XSAVE/XRSTOR capable AMD CPUs XSA-53/CVE-2013-2077: Hypervisor crash due to missing exception recovery on XRSTOR XSA-54/CVE-2013-2078: Hypervisor crash due to missing exception recovery on XSETBV XSA-55/CVE-2013-2194: integer overflows XSA-55/CVE-2013-2195: pointer dereferences XSA-55/CVE-2013-2196: other problems XSA-56/CVE-2013-2072: Buffer overflow in xencontrol Python bindings affecting xend XSA-57/CVE-2013-2211: libxl allows guest write access to sensitive console related xenstore keys XSA-58/CVE-2013-1432: Page reference counting error due to XSA-45/CVE-2013-1918 fixes
- Record
MGASA-2013-0197- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
xenDebian:12 |
before 4.3.0-1 | 4.3.0-1 |
xenDebian:13 |
before 4.3.0-1 | 4.3.0-1 |
xenDebian:14 |
before 4.3.0-1 | 4.3.0-1 |
xenDebian:7 From an advisory covering 19 CVEs |
before 4.1.4-3+deb7u2, plus listed versions 4.1.4-34.1.4-3+deb7u1 |
4.1.4-3+deb7u2 |
xenMageia:3 From an advisory covering 9 CVEs |
before 4.2.1-16.2.mga3 | 4.2.1-16.2.mga3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-2195 is a medium vulnerability (CVSS 6.9) in Xen, published July 1, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 31st percentile. Fixed in xen 4.3.0-1.
References
lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html
secunia.com/advisories/55082
security.gentoo.org/glsa/glsa-201309-24.xml
openwall.com/lists/oss-security/2013/06/20/4
Show 8 moreShow less
debian.org/security/2014/dsa-3006
support.citrix.com/article/CTX138058
nvd.nist.gov/vuln/detail/CVE-2013-2195
github.com/advisories/GHSA-8xm4-2qhp-6g6g
security-tracker.debian.org/tracker/CVE-2013-2195
advisories.mageia.org/MGASA-2013-0197.html
bugs.mageia.org/show_bug.cgi?id=10586