GLSA-202107-30 : Xen: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202107-30 Xen: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Xen. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

Fedora 32 : xen (2020-df772b417b)

xenstore watch notifications lacking permission checks XSA-115, CVE-2020-29480 1908091 Xenstore: new domains inheriting existing node permissions XSA-322, CVE-2020-29481 1908095 Xenstore: wrong path length check XSA-323, CVE-2020-29482 1908096 Xenstore: guests can crash xenstored via watchs...

Fedora: Security Advisory for xen (FEDORA-2020-64859a826b)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2020-29486

CVE-2020-29486 affects Xen up to 4.14.x with oxenstored; an unprivileged client (guest) can modify xenstore node ownership, causing quota exhaustion and potential memory DoS that can crash a specific guest or the host. Systems using oxenstored are vulnerable; builds using C xenstored are not. Pub...