Fedora Update for xen FEDORA-2013-7432

Check for the Version of xen OpenVAS Vulnerability Test Fedora Update for xen FEDORA-2013-7432 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

Fedora Update for xen FEDORA-2013-6723

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 2636-1] xen security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2636-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 01, 2013 http://www.debian.org/security/faq -...

Debian DSA-2636-2 : xen - several vulnerabilities

Multiple vulnerabilities have been discovered in the Xen hypervisor. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2012-4544 Insufficient validation of kernel or ramdisk sizes in the Xen PV domain builder could result in denial of service. -...

[SECURITY] [DSA 2636-2] xen regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-2636-2 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 03, 2013 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2636-2 (xen - several vulnerabilities)

Multiple vulnerabilities have been discovered in the Xen hypervisor. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2012-4544 Insufficient validation of kernel or ramdisk sizes in the Xen PV domain builder could result in denial of service. CVE-2012-5511...

Fedora Update for xen FEDORA-2013-2002

Check for the Version of xen OpenVAS Vulnerability Test Fedora Update for xen FEDORA-2013-2002 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

CentOS 5 : xen (CESA-2013:0241)

Updated xen packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...

CentOS Update for xen CESA-2013:0241 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Scientific Linux Security Update : xen on SL5.x i386/x86_64 (20130207)

A flaw was found in the way libxc, the Xen control library, handled excessively large kernel and ramdisk images when starting new guests. A privileged guest user in a para-virtualized guest a DomU could create a crafted kernel or ramdisk image that, when attempting to use it during guest start,...

Moderate: Red Hat Security Advisory: xen security update

Updated xen packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...

Fedora Update for xen FEDORA-2012-19828

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

openSUSE: Security Advisory for XEN (openSUSE-SU-2012:1572-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

XEN: security and bugfix update (important)

This security update of XEN fixes various bugs and security issues. - Upstream patch 26088-xend-xml-filesize-check.patch - bnc787163 - CVE-2012-4544: xen: Domain builder Out-of- memory due to malicious kernel/ramdisk XSA 25 CVE-2012-4544-xsa25.patch - bnc779212 - CVE-2012-4411: XEN / qemu: guest...

Fedora Update for xen FEDORA-2012-18242

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for xen FEDORA-2012-17408

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 18 : xen-4.2.0-3.fc18 (2012-17135)

update to xen 4.2.0, limit the size of guest kernels and ramdisks to avoid running out of memeory on dom0 during guest boot XSA-25, CVE-2012-4544 870414 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempt...

Fedora 16 : xen-4.1.3-3.fc16 (2012-17408)

limit the size of guest kernels and ramdisks to avoid running out of memory on dom0 during guest boot XSA-25,CVE-2012-4544 870414 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically cle...

Fedora 17 : xen-4.1.3-5.fc17 (2012-17204)

limit the size of guest kernels and ramdisks to avoid running out of memory on dom0 during guest boot XSA-25, CVE-2012-4544 870414 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically...

CVE-2012-4544

CVE-2012-4544 affects the Xen PV domain builder in Xen 4.2 and earlier. The vulnerability stems from not validating the size of the kernel or ramdisk (before or after decompression), enabling a local guest administrator to cause a denial of service by exhausting domain 0 memory with a crafted ker...