CentOS 5 : xen (CESA-2008:0194)

Updated xen packages that fix several security issues and a bug are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The xen packages contain tools for managing the virtual machine monitor in Red Ha...

CVE-2008-1944

CVE-2008-1944 refers to a buffer overflow in XenSource Xen para-virtualized framebuffer (PVFB) backend. The issue arises in PVFB messages 3.0 through 3.0.3 where the format of messages was not validated, potentially allowing a local attacker to cause a denial of service (SDL crash) and possibly e...