49 matches found
SUSE-SU-2017:2339-1 Security update for xen
This update for xen fixes the following issues: - CVE-2017-12855: Premature clearing of GTFwriting / GTFreading lead to potentially leaking sensitive information XSA-230, bsc1052686. - CVE-2017-12135: Unbounded recursion in grant table code allowed a malicious guest to crash the host or potential...
OracleVM 3.3 : xen (OVMSA-2017-0148)
The remote OracleVM system is missing necessary patches to address critical security updates : - From: Jan Beulich Subject: gnttab: correct pin status fixup for copy Regardless of copy operations only setting GNTPINhst, GNTPINdev also need to be taken into account when deciding whether to clear...
SUSE-SU-2017:2319-1 Security update for xen
This update for xen fixes several issues. These security issues were fixed: - CVE-2017-12135: Unbounded recursion in grant table code allowed a malicious guest to crash the host or potentially escalate privileges/leak information XSA-226, bsc1051787. - CVE-2017-12137: Incorrectly-aligned updates ...
CVE-2017-12137
CVE-2017-12137 affects Xen hypervisor, with a local privilege escalation via map_grant_ref in arch/x86/mm.c that could let a local PV guest OS user gain host privileges. The linked documents confirm Xen is the vulnerable component and identify the underlying issue as a map_grant_ref related flaw....
Fedora 26 : xen (2017-f336ba205d)
Qemu: serial: host memory leakage 16550A UART emulation CVE-2017-5579 1416162 Qemu: display: cirrus: OOB read access issue CVE-2017-7718 1443444 xen: various flaws 1481765 multiple problems with transitive grants XSA-226, CVE-2017-12135 x86: PV privilege escalation via mapgrantref XSA-227,...
Xen Hypervisor Multiple Vulnerabilities (XSA-226 - XSA-230)
According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by multiple vulnerabilities. Note that Nessus has checked the changeset versions based on the xen.git change log. Nessus did not check guest hardware configurations or if patches were applie...
Citrix XenServer Multiple Security Updates (CTX225941)
A number of security vulnerabilities have been identified in Citrix XenServer that may allow a malicious administrator of a guest VM to compromise the host. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
