[kernel-xen] [Xen-announce] Xen Security Advisory 56 (CVE-2013-2072) - Buffer overflow in xencontrol Python bindings affecting xend

Steven Haigh netwiz at crc.id.au
Sun May 19 09:47:42 EST 2013


Hi all,

Regarding this update... At this point, I don't think I'll be doing a 
whole release for this single security update.

The 'exploit' is very limited in scope and I highly doubt that anyone is 
running a configuration that lets untrusted administrators at a position 
that would exploit this.

If anyone has a differing opinion of this, I'd be happy to hear it...

-- 
Steven Haigh

Email: netwiz at crc.id.au
Web: https://www.crc.id.au
Phone: (03) 9001 6090 - 0412 935 897
Fax: (03) 8338 0299


More information about the kernel-xen mailing list