Xen OXenstored Daemon local DoS Vulnerability

Release date:
Updated on: 2013-02-27

Affected Systems:
XenSource Xen
Description:
--------------------------------------------------------------------------------
Bugtraq id: 57742
CVE (CAN) ID: CVE-2013-0215
 
Xen is an open-source Virtual Machine monitor developed by the University of Cambridge.

Oxenstored does not properly handle exceptions or malicious content in xenstore ring. malicious clients can exploit this vulnerability to cause oxenstored to read out-of-ring content or allocate a large amount of RAM.
 
<* Source: vendor

Link: http://lists.xen.org/archives/html/xen-announce/2013-02/msg00005.html
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
XenSource
---------
XenSource has released a Security Bulletin (msg00005) and corresponding patches for this:
Msg00005: Xen Security Advisory 38 (CVE-2013-0215)-oxenstored incorrect handling of certain Xenbus ring states
Link: http://lists.xen.org/archives/html/xen-announce/2013-02/msg00005.html
 
Patch download:
 
Xsa38.patch Xen 4.1.x, Xen 4.2.x, xen-unstable
 
$ Sha256sum xsa38 *. patch
9912d3239a6f784418fcec53fad7c316588a421e352462f661cd1070fcf21d4b xsa38.patch
$