| Reporter | Title | Published | Views | Family All 1017 |
|---|---|---|---|---|
| Microsoft Windows - POP/MOV SS Privilege Escalation Exploit | 23 May 201800:00 | – | zdt | |
| Microsoft Windows #MicrosoftWindows POP/MOV SS Local Privilege Elevation Exploit | 13 Jul 201800:00 | – | zdt | |
| page type reference leak on x86 | 12 Oct 201712:00 | – | xen | |
| x86: Incorrect handling of self-linear shadow mappings with translated guests | 12 Oct 201712:00 | – | xen | |
| x86: Incorrect handling of IST settings during CPU hotplug | 12 Oct 201712:00 | – | xen | |
| x86: infinite loop due to missing PoD error checking | 28 Nov 201712:00 | – | xen | |
| Missing p2m error checking in PoD code | 28 Nov 201712:00 | – | xen | |
| x86 PV guests may gain access to internally used pages | 12 Dec 201712:00 | – | xen | |
| broken x86 shadow mode refcount overflow check | 12 Dec 201712:00 | – | xen | |
| improper x86 shadow mode refcount error handling | 12 Dec 201712:00 | – | xen |
# SPDX-FileCopyrightText: 2018 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only
if(description)
{
script_oid("1.3.6.1.4.1.25623.1.0.874580");
script_version("2023-06-28T05:05:22+0000");
script_tag(name:"last_modification", value:"2023-06-28 05:05:22 +0000 (Wed, 28 Jun 2023)");
script_tag(name:"creation_date", value:"2018-05-17 05:46:54 +0200 (Thu, 17 May 2018)");
script_cve_id("CVE-2018-8897", "CVE-2018-7540", "CVE-2018-7541", "CVE-2018-7542", "CVE-2017-15595", "CVE-2017-17566", "CVE-2017-17563", "CVE-2017-17564", "CVE-2017-17565", "CVE-2017-17044", "CVE-2017-17045", "CVE-2017-15592", "CVE-2017-15597", "CVE-2017-15590", "CVE-2017-15591", "CVE-2017-15589", "CVE-2017-15588", "CVE-2017-15593", "CVE-2017-15594", "CVE-2018-10982", "CVE-2018-10981");
script_tag(name:"cvss_base", value:"9.0");
script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:S/C:C/I:C/A:C");
script_tag(name:"severity_vector", value:"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H");
script_tag(name:"severity_origin", value:"NVD");
script_tag(name:"severity_date", value:"2019-10-03 00:03:00 +0000 (Thu, 03 Oct 2019)");
script_tag(name:"qod_type", value:"package");
script_name("Fedora Update for xen FEDORA-2018-98684f429b");
script_tag(name:"summary", value:"The remote host is missing an update for the 'xen'
package(s) announced via the referenced advisory.");
script_tag(name:"vuldetect", value:"Checks if a vulnerable version is present on the target host.");
script_tag(name:"affected", value:"xen on Fedora 27");
script_tag(name:"solution", value:"Please install the updated packages.");
script_xref(name:"FEDORA", value:"2018-98684f429b");
script_xref(name:"URL", value:"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X6OEW7BFEIZGLUN6VOIHINTWV4FXDAXG");
script_tag(name:"solution_type", value:"VendorFix");
script_category(ACT_GATHER_INFO);
script_copyright("Copyright (C) 2018 Greenbone AG");
script_family("Fedora Local Security Checks");
script_dependencies("gather-package-list.nasl");
script_mandatory_keys("ssh/login/fedora", "ssh/login/rpms", re:"ssh/login/release=FC27");
exit(0);
}
include("revisions-lib.inc");
include("pkg-lib-rpm.inc");
release = rpm_get_ssh_release();
if(!release)
exit(0);
res = "";
if(release == "FC27")
{
if ((res = isrpmvuln(pkg:"xen", rpm:"xen~4.9.2~3.fc27", rls:"FC27")) != NULL)
{
security_message(data:res);
exit(0);
}
if (__pkg_match) exit(99);
exit(0);
}Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation