xen -- several vulnerabilities

2013-03-03T00:00:00
ID DSA-2636
Type debian
Reporter Debian
Modified 2013-03-03T00:00:00

Description

Multiple vulnerabilities have been discovered in the Xen hypervisor. The Common Vulnerabilities and Exposures project identifies the following problems:

Insufficient validation of kernel or ramdisk sizes in the Xen PV domain builder could result in denial of service.

Several HVM control operations performed insufficient validation of input, which could result in denial of service through resource exhaustion.

Incorrect interrupt handling when using VT-d hardware could result in denial of service.

Insufficient restriction of interrupt access could result in denial of service.

For the stable distribution (squeeze), these problems have been fixed in version 4.0.1-5.8.

For the testing distribution (wheezy), these problems have been fixed in version 4.1.4-2.

For the unstable distribution (sid), these problems have been fixed in version 4.1.4-2.

We recommend that you upgrade your xen packages.