Denial Of Service(DoS)

Xen is vulnerable to a denial of service, caused by the failure to call the initialization function by the "soft reset" feature. By initializing a "soft reboot", a local attacker could exploit this vulnerability to crash the process monitoring the guest...

Fedora 32 : xen (2021-a468f36bbe)

The remote Fedora 32 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-a468f36bbe advisory. - HVM soft-reset crashes toolstack XSA-368 CVE-2021-28687 - HVM soft-reset crashes toolstack XSA-368 fedora-all CVE-2021-28687 Note that Nessus has...

Fedora 33 : xen (2021-0b784a4d02)

The remote Fedora 33 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2021-0b784a4d02 advisory. - HVM soft-reset crashes toolstack XSA-368 CVE-2021-28687 - HVM soft-reset crashes toolstack XSA-368 fedora-all CVE-2021-28687 Note that Nessus has...

HVM soft-reset crashes toolstack

ISSUE DESCRIPTION libxl requires all data structures passed across its public interface to be initialized before use and disposed of afterwards by calling a specific set of functions. Many internal data structures also require this initialize / dispose discipline, but not all of them. When the...

Xen 安全漏洞

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. Xen has a security vulnerability that can be...

SUSE-SU-2019:0948-1 Security update for libvirt

This update for libvirt fixes the following issues: Security issue fixed: - CVE-2019-3840: Fixed a null pointer dereference vulnerability in virJSONValueObjectHasKey function which could have resulted in a remote denial of service via the guest agent bsc1127458. - CVE-2019-3886: Fixed an...

Cisco Content Service Switch performs soft reset when XML data is sent to web management interface

Overview The Cisco Content Service Switch contains a denial-of-service vulnerability that allows remote attackers to perform a soft reset on affected devices. Description The Cisco Content Service Switch CSS products include support for the session and application layers. This additional...

Security Advisory: Content Service Switch HTTP Processing Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory: Content Service Switch HTTP Processing Vulnerabilities Revision 1.0: INTERIM For Public Release 2002 May 15 18:00 GMT - ------------------------------------------------------------------------------- Please provide your feedback on this...