CVE-2015-8341

CVE-2015-8341 affects the Xen libxl toolstack in Xen 4.1.x–4.6.x, where mappings for pv kernel/initrd may not be properly released when managing multiple domains in one process. This can allow a local attacker to cause DoS via memory and disk consumption by starting domains. Connected advisories ...

xen-tools -- HVM qemu unexpectedly enabling emulated VGA graphics backends

The Xen Project reports: When instantiating an emulated VGA device for an x86 HVM guest qemu will by default enable a backend to expose that device, either SDL or VNC depending on the version of qemu and the build time configuration. The libxl toolstack library does not explicitly disable these...