SUSE SLES11 Security Update : Xen (SUSE-SU-2015:1157-1)

Xen was updated to fix six security issues : CVE-2015-4103: Potential unintended writes to host MSI message data field via qemu. XSA-128, bsc931625 CVE-2015-4104: PCI MSI mask bits inadvertently exposed to guests. XSA-129, bsc931626 CVE-2015-4105: Guest triggerable qemu MSI-X pass-through error...

Fedora 20 : xen-4.3.4-6.fc20 (2015-9965)

Heap overflow in QEMU PCNET controller, allowing guest-host escape XSA-135, CVE-2015-3209 1230537 GNTTABOPswapgrantref operation misbehavior XSA-134, CVE-2015-4163 vulnerability in the iret hypercall handler XSA-136, CVE-2015-4164 Potential unintended writes to host MSI message data field via qem...

openSUSE: Security Advisory for xen (openSUSE-SU-2015:1094-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for xen (important)

Xen was updated to 4.4.2 to fix multiple vulnerabilities and non-security bugs. The following vulnerabilities were fixed: CVE-2015-4103: Potential unintended writes to host MSI message data field via qemu XSA-128 boo931625 CVE-2015-4104: PCI MSI mask bits inadvertently exposed to guests XSA-129...

SUSE SLED11 / SLES11 Security Update : Xen (SUSE-SU-2015:1045-1)

Xen was updated to fix seven security vulnerabilities : CVE-2015-4103: Potential unintended writes to host MSI message data field via qemu. XSA-128, bnc931625 CVE-2015-4104: PCI MSI mask bits inadvertently exposed to guests. XSA-129, bnc931626 CVE-2015-4105: Guest triggerable qemu MSI-X...

Fedora 21 : xen-4.4.2-5.fc21 (2015-9466)

Potential unintended writes to host MSI message data field via qemu XSA-128, CVE-2015-4103, PCI MSI mask bits inadvertently exposed to guests XSA-129, CVE-2015-4104, Guest triggerable qemu MSI-X pass-through error messages XSA-130, CVE-2015-4105, Unmediated PCI register access in qemu XSA-131,...

Debian DSA-3286-1 : xen - security update

Multiple security issues have been found in the Xen virtualisation solution : - CVE-2015-3209 Matt Tait discovered a flaw in the way QEMU's AMD PCnet Ethernet emulation handles multi-TMD packets with a length above 4096 bytes. A privileged guest user in a guest with an AMD PCNet ethernet card...

Fedora 22 : xen-4.5.0-10.fc22 (2015-9456)

replace deprecated gnutls use in qemu-xen-traditional based on qemu-xen patches, work around a gcc 5 bug, Potential unintended writes to host MSI message data field via qemu XSA-128, CVE-2015-4103, PCI MSI mask bits inadvertently exposed to guests XSA-129, CVE-2015-4104, Guest triggerable qemu...

Fedora Update for xen FEDORA-2015-9466

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 3286-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3286-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 13, 2015 https://www.debian.org/security/faq -...

DSA-3286-1 xen - security update

Bulletin has no description...

Debian Security Advisory DSA 3286-1 (xen - security update)

Multiple security issues have been found in the Xen virtualisation solution: CVE-2015-3209 Matt Tait discovered a flaw in the way QEMU OpenVAS Vulnerability Test $Id: deb3286.nasl 6609 2017-07-07 12:05:59Z cfischer $ Auto-generated from advisory DSA 3286-1 using nvtgen 1.0 Script version: 1.0...

[USN-2630-1] QEMU vulnerabilities

========================================================================== Ubuntu Security Notice USN-2630-1 June 10, 2015 qemu, qemu-kvm vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivative...

[SECURITY] [DSA 3284-1] qemu security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3284-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 13, 2015 https://www.debian.org/security/faq -...

SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2015:1042-1)

Xen was updated to fix seven security issues and one non-security bug. The following vulnerabilities were fixed : - CVE-2015-4103: Potential unintended writes to host MSI message data field via qemu XSA-128 bnc931625 - CVE-2015-4104: PCI MSI mask bits inadvertently exposed to guests XSA-129...

Debian: Security Advisory (DSA-3286-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Citrix XenServer Multiple Security Updates (CTX201145)

A number of security vulnerabilities have been identified in Citrix XenServer that may allow a malicious administrator of a guest VM to crash the host. These vulnerabilities affect all currently supported versions of Citrix XenServer up to and including Citrix XenServer 6.5 Service Pack 1...

CVE-2015-4103

Xen 3.3.x through 4.5.x does not properly restrict write access to the host MSI message data field, which allows local x86 HVM guest administrators to cause a denial of service host interrupt handling confusion via vectors related to qemu and accessing spanning multiple fields...

CVE-2015-4103

CVE-2015-4103 affects Xen hypervisor 3.3.x–4.5.x; Xen does not properly restrict write access to the host MSI message data field, enabling local x86 HVM guest administrators to trigger a denial of service via qemu-related vectors spanning multiple fields (host interrupt handling). Public advisori...

SUSE-SU-2015:1042-1 Security update for xen

Xen was updated to fix seven security issues and one non-security bug. The following vulnerabilities were fixed: CVE-2015-4103: Potential unintended writes to host MSI message data field via qemu XSA-128 bnc931625 CVE-2015-4104: PCI MSI mask bits inadvertently exposed to guests XSA-129 bnc931626...