Mageia: Security Advisory (MGASA-2016-0098)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2016-0098 Updated xen packages fix security vulnerabilities

This xen update is based on upstream 4.5.2 maintenance release, and fixes the following security issues: The vgicv2tosgi function in arch/arm/vgic-v2.c in Xen 4.5.x, when running on ARM hardware with general interrupt controller GIC version 2, allows local guest users to cause a denial of service...

CVE-2015-0268

CVE-2015-0268 affects Xen 4.5.x on ARM with GIC version 2. The vulnerable function is vgic_v2_to_sgi in arch/arm/vgic-v2.c; a guest writing an invalid value to the GICD.SGIR register can trigger a host denial of service (host crash). Several connected sources corroborate the impact as a local-gue...