CVE-2013-2196
Multiple unspecified vulnerabilities in the Elf parser (libelf) in Xen 4.2.x and earlier allow...
Multiple unspecified vulnerabilities in the Elf parser (libelf) in Xen 4.2.x and earlier allow local guest administrators with certain permissions to have an unspecified impact via a crafted kernel, related to "other problems" that are not CVE-2013-2194 or CVE-2013-2195.
Exploit likelihood
What each source reports
NVD Score used
Multiple unspecified vulnerabilities in the Elf parser (libelf) in Xen 4.2.x and earlier allow local guest administrators with certain permissions to have an unspecified impact via a crafted kernel, related to "other problems" that are not CVE-2013-2194 or CVE-2013-2195.
- Record
CVE-2013-2196- CVSS 2.0
- 6.9 Medium
AV:L/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Multiple unspecified vulnerabilities in the Elf parser (libelf) in Xen 4.2.x and earlier allow local guest administrators with certain permissions to have an unspecified impact via a crafted kernel, related to "other problems" that are not CVE-2013-2194 or CVE-2013-2195.
- Record
CVE-2013-2196- Updated
- 2026-11-02
EUVDEUVD-2013-2151 No score
Multiple unspecified vulnerabilities in the Elf parser (libelf) in Xen 4.2.x and earlier allow local guest administrators with certain permissions to have an unspecified impact via a crafted kernel, related to "other problems" that are not CVE-2013-2194 or CVE-2013-2195.
- Record
EUVD-2013-2151- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9cmh-g87c-qgh5 No score
Multiple unspecified vulnerabilities in the Elf parser (libelf) in Xen 4.2.x and earlier allow...
Multiple unspecified vulnerabilities in the Elf parser (libelf) in Xen 4.2.x and earlier allow local guest administrators with certain permissions to have an unspecified impact via a crafted kernel, related to "other problems" that are not CVE-2013-2194 or CVE-2013-2195.
- Record
GHSA-9cmh-g87c-qgh5- Updated
- 2026-11-02
OSV No score
Multiple unspecified vulnerabilities in the Elf parser (libelf) in Xen 4.2.x and earlier allow local guest administrators with certain permissions to have an unspecified impact via a crafted kernel, related to "other problems" that are not CVE-2013-2194 or CVE-2013-2195.
- Record
CVE-2013-2196- Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-2196 No score
Multiple unspecified vulnerabilities in the Elf parser (libelf) in Xen 4.2.x and earlier allow local guest administrators with certain permissions to have an unspecified impact via a crafted kernel, related to "other problems" that are not CVE-2013-2194 or CVE-2013-2195.
- Record
DEBIAN-CVE-2013-2196- Updated
- 2026-11-02
OSVMGASA-2013-0197 No score
Updated xen package fixes security issues
This update fixes the following security issues: XSA-52/CVE-2013-2076: Information leak on XSAVE/XRSTOR capable AMD CPUs XSA-53/CVE-2013-2077: Hypervisor crash due to missing exception recovery on XRSTOR XSA-54/CVE-2013-2078: Hypervisor crash due to missing exception recovery on XSETBV XSA-55/CVE-2013-2194: integer overflows XSA-55/CVE-2013-2195: pointer dereferences XSA-55/CVE-2013-2196: other problems XSA-56/CVE-2013-2072: Buffer overflow in xencontrol Python bindings affecting xend XSA-57/CVE-2013-2211: libxl allows guest write access to sensitive console related xenstore keys XSA-58/CVE-2013-1432: Page reference counting error due to XSA-45/CVE-2013-1918 fixes
- Record
MGASA-2013-0197- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
xenDebian:12 |
before 4.3.0-1 | 4.3.0-1 |
xenDebian:13 |
before 4.3.0-1 | 4.3.0-1 |
xenDebian:14 |
before 4.3.0-1 | 4.3.0-1 |
xenDebian:7 From an advisory covering 19 CVEs |
before 4.1.4-3+deb7u2, plus listed versions 4.1.4-34.1.4-3+deb7u1 |
4.1.4-3+deb7u2 |
xenMageia:3 From an advisory covering 9 CVEs |
before 4.2.1-16.2.mga3 | 4.2.1-16.2.mga3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-2196 is a medium vulnerability (CVSS 6.9) in Xen, published July 1, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 31st percentile. Fixed in xen 4.3.0-1.
References
lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html
secunia.com/advisories/55082
security.gentoo.org/glsa/glsa-201309-24.xml
openwall.com/lists/oss-security/2013/06/20/4
Show 8 moreShow less
debian.org/security/2014/dsa-3006
support.citrix.com/article/CTX138058
nvd.nist.gov/vuln/detail/CVE-2013-2196
github.com/advisories/GHSA-9cmh-g87c-qgh5
security-tracker.debian.org/tracker/CVE-2013-2196
advisories.mageia.org/MGASA-2013-0197.html
bugs.mageia.org/show_bug.cgi?id=10586