OracleVM 3.1 : xen (OVMSA-2013-0009)

The remote OracleVM system is missing necessary patches to address critical security updates : - oxenstored incorrect handling of certain Xenbus ring states Xen Security Advisory 38 CVE-2013-0215 Patch xsa38.patch The oxenstored daemon the ocaml version of the xenstore daemon does not correctly...

CVE-2014-0153

CVE-2014-0153 affects oVirt REST API prior to the 3.4.1/3.4.x updates, where session IDs are stored in HTML5 local storage. The underlying risk is that an attacker could read a user’s session ID from local storage via a crafted web page, leading to potential confidentiality impact. Affected softw...

Fourtwosevenbb Cookie-based Authentication Bypass - Ver2 (CVE-2006-0153)

An authentication bypass vulnerability has been reported in 427BB Fourtwosevenbb. A remote attacker could trigger this vulnerability by using a valid username and usertype and setting the authenticated cookie. Successful exploitation of this vulnerability would allow remote attackers to gain...

Fedora Update for xen FEDORA-2013-22312

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for xen FEDORA-2013-16371

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 5 : kernel (ELSA-2013-0847)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0847 advisory. - xen AMD IOMMU: spot missing IO-APIC entries in IVRS table Igor Mammedov 910912 910913 CVE-2013-0153 - xen AMD, IOMMU: Make per-device interrupt remap table...

Oracle Linux 5 : kernel (ELSA-2013-0847-1)

From Red Hat Security Advisory 2013:0847 : Updated kernel packages that fix one security issue and multiple bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVS...

Fedora Update for xen FEDORA-2013-10941

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for xen FEDORA-2013-10941

Check for the Version of xen OpenVAS Vulnerability Test Fedora Update for xen FEDORA-2013-10941 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for xen FEDORA-2013-10929

Check for the Version of xen OpenVAS Vulnerability Test Fedora Update for xen FEDORA-2013-10929 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for xen FEDORA-2013-10136

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scripttagname:"affected", value:"xen...

RedHat Update for kernel RHSA-2013:0847-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 5 : kernel (CESA-2013:0847)

Updated kernel packages that fix one security issue and multiple bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...

Fedora Update for xen FEDORA-2013-7432

Check for the Version of xen OpenVAS Vulnerability Test Fedora Update for xen FEDORA-2013-7432 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

Fedora Update for xen FEDORA-2013-6723

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for xen FEDORA-2013-6641

Check for the Version of xen OpenVAS Vulnerability Test Fedora Update for xen FEDORA-2013-6641 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

Fedora 17 : xen-4.1.5-1.fc17 (2013-6723)

Thu Apr 25 2013 Michael Young - 4.1.5-1 - update to xen-4.1.5 includes fixes for passed through IRQs or PCI devices might allow denial of service attack XSA-46, CVE-2013-1919 953568 SYSENTER in 32-bit PV guests on 64-bit xen can crash hypervisor XSA-44, CVE-2013-1917 953569 grant releases can...

SuSE 11.2 Security Update : Xen (SAT Patch Number 7492)

XEN has been updated to fix various bugs and security issues : - XSA 36 To avoid an erratum in early hardware, the Xen AMD IOMMU code by default choose to use a single interrupt remapping table for the whole system. This sharing implied that any guest with a passed through PCI device that is bus...

[SECURITY] [DSA 2636-1] xen security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2636-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 01, 2013 http://www.debian.org/security/faq -...

Debian DSA-2636-2 : xen - several vulnerabilities

Multiple vulnerabilities have been discovered in the Xen hypervisor. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2012-4544 Insufficient validation of kernel or ramdisk sizes in the Xen PV domain builder could result in denial of service. -...