ALPINE-CVE-2017-17044

An issue was discovered in Xen through 4.9.x allowing HVM guest OS users to cause a denial of service infinite loop and host OS hang by leveraging the mishandling of Populate on Demand PoD errors...

[SECURITY] Fedora 26 Update: xen-4.8.2-7.fc26

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

[SECURITY] Fedora 27 Update: xen-4.9.0-14.fc27

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

Debian DLA-1181-1 : xen security update

Multiple vulnerabilities have been discovered in the Xen hypervisor : CVE-2017-15588 Jann Horn discovered a race condition that can cause a stale TLB entry which might result in privilege escalation, denial of service or information leak. CVE-2017-15589 Roger Pau Monn discovered a hypervisor stac...

[SECURITY] [DLA 1181-1] xen security update

Package : xen Version : 4.1.6.lts1-10 CVE ID : CVE-2017-15588 CVE-2017-15589 CVE-2017-15592 CVE-2017-15593 CVE-2017-15595 Multiple vulnerabilities have been discovered in the Xen hypervisor: CVE-2017-15588 Jann Horn discovered a race condition that can cause a stale TLB entry which might result i...

[SECURITY] Fedora 25 Update: xen-4.7.3-8.fc25

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

[SECURITY] Fedora 26 Update: xen-4.8.2-5.fc26

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

The vulnerability of Xen hypervisors, related to uncontrolled resource consumption, allows attackers to cause service failures or increase their privileges.

The vulnerability of Xen hypervisors is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor, operating locally within the user account of the x86 operating system in a paravirtualization mode, to cause service interruptions unlimited...

[SECURITY] Fedora 27 Update: xen-4.9.0-13.fc27

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

[SECURITY] Fedora 27 Update: xen-4.9.0-12.fc27

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

[SECURITY] Fedora 27 Update: xen-4.9.0-12.fc27

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

[SECURITY] Fedora 25 Update: xen-4.7.3-7.fc25

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

[SECURITY] Fedora 26 Update: xen-4.8.2-4.fc26

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

Xen Hypervisor Pin Count / Page Reference Grant Table Code Guest-to-Host Memory Corruption (XSA-236)

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by a memory corruption vulnerability. This may allow an attacker on the guest to cause a denial of service or gain elevated privileges on the host. Note that Nessus has checked the changeset...

The vulnerability of the alloc_heap_pages function in Xen hypervisors allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the allocheappages function in Xen hypervisors arises due to insufficient checking of parameters. Exploiting this vulnerability allows a local attacker to execute arbitrary code or cause a service failure by exceeding memory limits, using the NUMA parameter for memory...

The vulnerability of Xen hypervisors, related to errors in access rights comparison, allows attackers to increase their privileges or cause service failures.

The vulnerability of Xen hypervisors is related to access authorization errors that occur when permissions for guest x86 operating systems running in PV mode are removed or changed. Exploiting this vulnerability can allow a local attacker to increase their privileges or cause service failures...

Xen Hypervisor Page Type Reference Handling Memory Exhaustion Guest-to-Host DoS (XSA-242)

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by an unspecified flaw in arch/x86/mm.c that is triggered as page type references are not properly handled when performing certain cleanup operations. This allows an attacker on the guest to...

Xen Hypervisor Pagetable De-typing Recursion Handling Guest-to-Host DoS (XSA-240)

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by a stack overflow vulnerability that is triggered when recursion is not properly handled when de-typing linear pagetables. By stacking multiple layers of page tables, an attacker within a...

Xen Hypervisor Multiple Functions DMOP Handling Guest-to-Host DoS (XSA-238)

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by unspecified flaws in arch/x86/hvm/ioreq.c that is triggered when handling DMOPs. This may allow an attacker within a guest to consume excessive resources. Note this can only be exploited ...

Xen Hypervisor PCI MSI Interrupt Setup Multiple Guest-to-Host Privilege Escalation (XSA-237)

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by multiple vulnerabilities related to the setup of PCI MSI interrupts, which may allow an attacker on the guest to cause a denial of service on the host, potentially disclose sensitive...