OracleVM 3.2 : xen (OVMSA-2014-0026)

The remote OracleVM system is missing necessary patches to address critical security updates : - x86/HVM: properly bound x2APIC MSR range This is XSA-108. Additional changelog comments added to 4.1.3-25.el5.94.1.3 CVE-2014-7188 - Fix for bug 19698532 - x86emul: only emulate software interrupt...

OracleVM 2.2 : kernel (OVMSA-2009-0033)

The remote OracleVM system is missing necessary patches to address critical security updates : - security require root for mmapminaddr Eric Paris 518142 518143 CVE-2009-2695 - md prevent crash when accessing suspend sysfs attr Danny Feng 518135 518136 CVE-2009-2849 - nfs knfsd: fix NFSv4 OEXCL...

OracleVM 3.2 : xen (OVMSA-2013-0042)

The remote OracleVM system is missing necessary patches to address critical security updates : - Other than the HVM emulation path, the PV case so far failed to check that YMM state requires SSE state to be enabled, allowing for a GP to occur upon passing the inputs to XSETBV inside the hyperviso...

OracleVM 3.1 : xen (OVMSA-2012-0057)

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2012-0057 for details. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory...

OracleVM 3.2 : xen (OVMSA-2013-0059)

The remote OracleVM system is missing necessary patches to address critical security updates : - x86: fix page refcount handling in page table pin error path In the original patch 7 of the series addressing XSA-45 I mistakenly took the addition of the call to getpagelight in allocpagetype to cove...

OracleVM 2.1 : xen (OVMSA-2008-2003)

The remote OracleVM system is missing necessary patches to address critical security updates : - Disable QEMU image format auto-detection CVE-2008-2004 - Fix PVFB to validate frame buffer description - Fix PVFB to cope with bogus update requests - Fix QEMU buffer overflow CVE-2007-5730 - Fix QEMU...

OracleVM 3.2 : xen (OVMSA-2013-0011)

The remote OracleVM system is missing necessary patches to address critical security updates : - oxenstored incorrect handling of certain Xenbus ring states Xen Security Advisory 38 CVE-2013-0215 Patch xsa38.patch The oxenstored daemon the ocaml version of the xenstore daemon does not correctly...

OracleVM 3.1 : xen (OVMSA-2013-0068)

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2013-0068 for details. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory...

OracleVM 3.2 : xen (OVMSA-2013-0069)

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2013-0069 for details. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory...

OracleVM 2.2 : xen (OVMSA-2012-0048)

The remote OracleVM system is missing necessary patches to address critical security updates : - XSA-12: prevent a 64 bit guest setting reserved bits in DR7 orabug 14554090 CVE-2012-3494 - XSA-14: Don't BUGON PoD operations on a non-translated guest orabug 14554272 CVE-2012-3496 - XSA-17: console...

OracleVM 2.2 : xen (OVMSA-2011-0008)

The remote OracleVM system is missing necessary patches to address critical security updates : - Passthrough: disable bus-mastering on any card that causes an IOMMU fault Tim Deegan CVE-2011-3131 - Serialize iptables calls in hotplug scripts rhbz 460410 - Fix iptables service check bug orabug...

OracleVM 2.2 : xen (OVMSA-2013-0075)

The remote OracleVM system is missing necessary patches to address critical security updates : - x86: check segment descriptor read result in 64-bit OUTS emulation XSA-67 Matthew Daley orabug 17571623 CVE-2013-4368 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this...

OracleVM 2.2 : xen (OVMSA-2012-0058)

The remote OracleVM system is missing necessary patches to address critical security updates : XSA-27: hvm: Limit the size of large HVM op batches orabug 15907978 CVE-2012-5511 XSA-29: add missing guest address range checks to XENMEMexchange handlers orabug 15907996 CVE-2012-5513 XSA-30: xen: fix...

OracleVM 2.2 : acpid (OVMSA-2009-0037)

The remote OracleVM system is missing necessary patches to address critical security updates : - Resolves: 515062 CVE-2009-4033 acpid: log file created with random permissions - start acpid before hal - Resolves: 503177 - Updated the License entry - Fixed CVE-2009-0798 too many open files DoS -...

OracleVM 2.2 : ovs-agent (OVMSA-2014-0029)

The remote OracleVM system is missing necessary patches to address critical security updates : - disable sslv3 in ovs-agent orabug 19893287 - Remove changing manualshutdown value when doing syncvmstatus function orabug 16682111 - A test 2.3-88 version for bug 16695624, improve the log of startvm...

OracleVM 3.3 : nss (OVMSA-2014-0023)

The remote OracleVM system is missing necessary patches to address critical security updates : nss - Added nss-vendor.patch to change vendor - Replace expired PayPal test certificate that breaks the build - Resolves: Bug 1145431 - CVE-2014-1568 - Resolves: Bug 1145431 - CVE-2014-1568 - Removed...

OracleVM 3.1 : xen (OVMSA-2013-0001)

The remote OracleVM system is missing necessary patches to address critical security updates : - VT-d: fix interrupt remapping source validation for devices behind legacy bridges Using SVTVERIFYBUS here doesn't make sense native Linux also uses SVTVERIFYSIDSQ here instead. CVE-2012-5634 - When xe...

OracleVM 3.2 : xen (OVMSA-2013-0072)

The remote OracleVM system is missing necessary patches to address critical security updates : - x86: check segment descriptor read result in 64-bit OUTS emulation When emulating such an operation from a 64-bit context CS has long mode set, and the data segment is overridden to FS/GS, the result ...

OracleVM 2.1 : udev (OVMSA-2009-0006)

The remote OracleVM system is missing necessary patches to address critical security updates : CVE-2009-1185 udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sending a NETLINK message from user space. - fix fo...

OracleVM 3.2 : xen (OVMSA-2013-0040)

The remote OracleVM system is missing necessary patches to address critical security updates : - libxc: limit cpu values when setting vcpu affinity When support for pinning more than 64 cpus was added, check for cpu out-of-range values was removed. This can lead to subsequent out-of-bounds cpumap...