[SECURITY] Fedora 21 Update: xen-4.4.2-9.fc21

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

[SECURITY] Fedora 22 Update: xen-4.5.1-5.fc22

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

[SECURITY] Fedora 23 Update: xen-4.5.1-5.fc23

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

The vulnerability of Xen hypervisors allows a attacker to trigger a failure in the host operating system services.

The vulnerability of Xen hypervisors is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow a local attacker to cause a failure in the host operating system’s services...

Citrix XenServer QEMU IDE Buffer Overflow Code Execution (CTX201593)

The version of Citrix XenServer running on the remote host is affected by a heap buffer overflow condition in the IDE subsystem of the bundled QEMU software, which is related to I/O buffer access when handling certain ATAPI commands. An attacker, with sufficient privileges in an HVM guest VM, can...

[SECURITY] Fedora 21 Update: xen-4.4.2-7.fc21

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

[SECURITY] Fedora 22 Update: xen-4.5.1-2.fc22

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

Oracle Patches Java Zero Day

Oracle has released its quarterly patch update, which includes fixes for nearly 200 vulnerabilities. The most notable bug fixed in this release is the Java zero day that’s been used in an ongoing attack campaign. The massive release from Oracle has patches for a long list of products, but the Jav...

FreeBSD : xen-kernel -- Information leak through XEN_DOMCTL_gettscinfo (ce658051-27ea-11e5-a4a5-002590263bf5)

The Xen Project reports : The handler for XENDOMCTLgettscinfo failed to initialize a padding field subsequently copied to guest memory. A similar leak existed in XENSYSCTLgetdomaininfolist, which is being addressed here regardless of that operation being declared unsafe for disaggregation by...

The vulnerability of Xen hypervisors allows a perpetrator to execute arbitrary code.

The vulnerability of the QEMU hypervisor component in Xen is caused by an overflow in the buffer of dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending specially crafted packets containing fields such as TXSTATUSSTARTPACKET and TXSTATUSDEVIC...

Surebackup Error “OS did not boot in the allotted time”

Challenge A VM being started by SureBackup fails with the error: OS did not boot in the allotted time Cause This error occurs when the VM being powered on by the SureBackup job fails to become stable within the "Maximum allowed boot time" specified in the Application Group settings or the Linked...

[SECURITY] Fedora 20 Update: xen-4.3.4-6.fc20

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

[SECURITY] Fedora 21 Update: xen-4.4.2-6.fc21

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

[SECURITY] Fedora 22 Update: xen-4.5.0-11.fc22

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

[SECURITY] Fedora 22 Update: xen-4.5.0-10.fc22

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

[SECURITY] Fedora 21 Update: xen-4.4.2-5.fc21

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

Debian Security Advisory DSA 3286-1 (xen - security update)

Multiple security issues have been found in the Xen virtualisation solution: CVE-2015-3209 Matt Tait discovered a flaw in the way QEMU OpenVAS Vulnerability Test $Id: deb3286.nasl 6609 2017-07-07 12:05:59Z cfischer $ Auto-generated from advisory DSA 3286-1 using nvtgen 1.0 Script version: 1.0...

Catastrophic vulnerability: Venom threat most of the data center-vulnerability warning-the black bar safety net

A security research firm alert, referring to a new Bug could allow a hacker from the inside of the ride unscathed in the data center solve most of the machine. The zero-day vulnerability from the extensive application virtualization software of the traditional General-purpose component that can b...

DEBIAN-CVE-2015-4103

Xen 3.3.x through 4.5.x does not properly restrict write access to the host MSI message data field, which allows local x86 HVM guest administrators to cause a denial of service host interrupt handling confusion via vectors related to qemu and accessing spanning multiple fields...

openSUSE Security Update : xen (openSUSE-2015-391) (Venom)

The XEN hypervisor was updated to fix two security issues : - Fixed a buffer overflow in the floppy drive emulation, which could be used to denial of service attacks or potential code execution against the host. CVE-2015-3456 - Xen did not initialize certain fields, which allowed certain remote...