Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
debianDebianDEBIAN:DLA-1949-1:95A46
HistoryOct 08, 2019 - 12:40 p.m.

[SECURITY] [DLA 1949-1] xen security update

2019-10-0812:40:59
lists.debian.org
91

8.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

25.6%

JSON

Package : xen
Version : 4.4.4lts5-0+deb8u1
CVE ID : CVE-2018-19961 CVE-2018-19962 CVE-2018-19966
XSA ID : XSA-275 XSA-280 XSA-285 XSA-287 XSA-288

Multiple vulnerabilities have been discovered in the Xen hypervisor, which
could result in denial of service, informations leaks or privilege
escalation.

For Debian 8 "Jessie", these problems have been fixed in version
4.4.4lts5-0+deb8u1.

We recommend that you upgrade your xen packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
Attachment:
signature.asc
Description: PGP signature

OSVersionArchitecturePackageVersionFilename
Debian9armhflibxen-dev< 4.8.5+shim4.10.2+xsa282-1+deb9u11libxen-dev_4.8.5+shim4.10.2+xsa282-1+deb9u11_armhf.deb
Debian8amd64xen-hypervisor-4.4-amd64< 4.4.4lts5-0+deb8u1xen-hypervisor-4.4-amd64_4.4.4lts5-0+deb8u1_amd64.deb
Debian9arm64xenstore-utils< 4.8.5+shim4.10.2+xsa282-1+deb9u11xenstore-utils_4.8.5+shim4.10.2+xsa282-1+deb9u11_arm64.deb
Debian9arm64xen-system-arm64< 4.8.5+shim4.10.2+xsa282-1+deb9u11xen-system-arm64_4.8.5+shim4.10.2+xsa282-1+deb9u11_arm64.deb
Debian9armhfxen-hypervisor-4.8-armhf< 4.8.5+shim4.10.2+xsa282-1+deb9u11xen-hypervisor-4.8-armhf_4.8.5+shim4.10.2+xsa282-1+deb9u11_armhf.deb
Debian9armhflibxenstore3.0-dbgsym< 4.8.5+shim4.10.2+xsa282-1+deb9u11libxenstore3.0-dbgsym_4.8.5+shim4.10.2+xsa282-1+deb9u11_armhf.deb
Debian8i386libxen-dev< 4.4.4lts5-0+deb8u1libxen-dev_4.4.4lts5-0+deb8u1_i386.deb
Debian9armhflibxen-4.8-dbgsym< 4.8.5+shim4.10.2+xsa282-1+deb9u11libxen-4.8-dbgsym_4.8.5+shim4.10.2+xsa282-1+deb9u11_armhf.deb
Debian9amd64libxen-4.8< 4.8.5+shim4.10.2+xsa282-1+deb9u11libxen-4.8_4.8.5+shim4.10.2+xsa282-1+deb9u11_amd64.deb
Debian8amd64xen-system-amd64< 4.4.4lts5-0+deb8u1xen-system-amd64_4.4.4lts5-0+deb8u1_amd64.deb
Rows per page:
1-10 of 691

Related

nessus 18
redhatcve 3
xen 2
osv 5
openvas 17
suse 3
debian 1
citrix 1
fedora 5
prion 3
debiancve 3
cve 3
ubuntucve 3
ibm 1
nessus
nessus
Debian DLA-1949-1 : xen security update
2019-10-09 00:00:00
Xen Project Insufficient TLB Flushing Vulnerability (XSA-275)
2018-12-13 00:00:00
Fedora 28 : xen (2019-bce6498890)
2019-03-25 00:00:00
redhatcve
redhatcve
CVE-2018-19962
2018-12-13 11:11:33
CVE-2018-19961
2018-12-13 11:11:02
CVE-2018-19966
2018-12-13 11:13:57
xen
xen
insufficient TLB flushing / improper large page mappings with AMD IOMMUs
2018-11-20 12:00:00
Fix for XSA-240 conflicts with shadow paging
2018-11-20 12:00:00
osv
osv
xen - security update
2019-01-14 00:00:00
xen - security update
2019-10-08 00:00:00
CVE-2018-19961
2018-12-08 04:29:00
openvas
openvas
openSUSE: Security Advisory for xen (openSUSE-SU-2018:4111-1)
2018-12-13 00:00:00
SUSE: Security Advisory (SUSE-SU-2018:4070-1)
2021-04-19 00:00:00
SUSE: Security Advisory (SUSE-SU-2019:0020-1)
2021-04-19 00:00:00
suse
suse
Security update for xen (important)
2018-12-13 03:17:36
Security update for xen (important)
2019-04-17 00:00:00
Security update for xen (important)
2018-12-29 15:11:23
debian
debian
[SECURITY] [DSA 4369-1] xen security update
2019-01-14 22:09:42
citrix
citrix
Citrix XenServer Security Update
2018-11-20 05:00:00
fedora
fedora
[SECURITY] Fedora 29 Update: xen-4.11.1-4.fc29
2019-03-12 22:20:11
[SECURITY] Fedora 29 Update: xen-4.11.1-6.fc29
2019-07-02 02:30:55
[SECURITY] Fedora 29 Update: xen-4.11.1-5.fc29
2019-05-30 17:27:30
prion
prion
Design/Logic Flaw
2018-12-08 04:29:00
Design/Logic Flaw
2018-12-08 04:29:00
Design/Logic Flaw
2018-12-08 04:29:00
debiancve
debiancve
CVE-2018-19961
2018-12-08 04:29:00
CVE-2018-19962
2018-12-08 04:29:00
CVE-2018-19966
2018-12-08 04:29:00
cve
cve
CVE-2018-19961
2018-12-08 04:29:00
CVE-2018-19962
2018-12-08 04:29:00
CVE-2018-19966
2018-12-08 04:29:00
ubuntucve
ubuntucve
CVE-2018-19961
2018-12-08 00:00:00
CVE-2018-19962
2018-12-08 00:00:00
CVE-2018-19966
2018-12-08 00:00:00
ibm
ibm
Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801-v
2019-04-18 16:40:01

8.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

25.6%

JSON
Related for DEBIAN:DLA-1949-1:95A46
nessus18redhatcve3xen2osv5openvas17suse3debian1citrix1fedora5prion3debiancve3cve3ubuntucve3ibm1