OracleVM 3.2 : xen (OVMSA-2018-0029) (Meltdown) (Spectre)

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2018-0029 for details. C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory OVMSA-2018-0029...

OracleVM 3.2 : xen (OVMSA-2017-0096)

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2017-0096 for details. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory...

OracleVM 3.2 : xen (OVMSA-2016-0178)

The remote OracleVM system is missing necessary patches to address critical security updates : - From: Jan Beulich Subject: x86emul: CMPXCHG8B ignores operand size prefix Otherwise besides mis-handling the instruction, the comparison failure case would result in uninitialized stack data being...

OracleVM 3.2 : xen (OVMSA-2016-0166)

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2016-0166 for details. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory...

Oracle: Security Advisory (ELSA-2013-0599)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OracleVM 3.2 : xen (OVMSA-2015-0096)

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2015-0096 for details. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory...

OracleVM 3.2 : xen (OVMSA-2015-0068) (POODLE) (Venom)

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2015-0068 for details. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory...

Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the kernel-xen-devel package of the OpenSUSE operating system can be exploited, leading to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

OracleVM 3.2 : xen (OVMSA-2015-0028)

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2015-0028 for details. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory...

OracleVM 3.1 : xen (OVMSA-2014-0010)

The remote OracleVM system is missing necessary patches to address critical security updates : - page-alloc: scrub pages used by hypervisor upon freeing ... unless they're part of a fully separate pool and hence can't ever be used for guest allocations. This is XSA-100. %NASLMINLEVEL 70300 C...

OracleVM 3.1 : xen (OVMSA-2013-0068)

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2013-0068 for details. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory...

OracleVM 3.1 : xen (OVMSA-2013-0001)

The remote OracleVM system is missing necessary patches to address critical security updates : - VT-d: fix interrupt remapping source validation for devices behind legacy bridges Using SVTVERIFYBUS here doesn't make sense native Linux also uses SVTVERIFYSIDSQ here instead. CVE-2012-5634 - When xe...

OracleVM 3.1 : xen (OVMSA-2012-0021)

The remote OracleVM system is missing necessary patches to address critical security updates : - x86-64: detect processors subject to AMD erratum 121 and refuse to bootCVE-2006-0744 - guest denial of service on syscall/sysenter exception generation CVE-2012-0217,CVE-2012-0218 - Remove unnecessary...

Oracle Linux 5 : xen (ELSA-2012-1236)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-1236 advisory. 3.0.3-135.el58.5 - console: Prevent escape sequence length overflow rhbz 851253 Tenable has extracted the preceding description block directly from the Oracle...

Fedora 19 : xen-4.2.2-5.fc19 (2013-8513)

xend toolstack doesn't check bounds for VCPU affinity XSA-56, CVE-2013-2072 xen-devel should require libuuid-devel, pygrub menu items can include too much text Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

CentOS Security Advisory CESA-2009:1472 (xen)

The remote host is missing updates to xen announced in advisory CESA-2009:1472. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

CentOS Security Advisory CESA-2009:0003 (xen)

The remote host is missing updates to xen announced in advisory CESA-2009:0003. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

PT-2013-6345 · Suse +4 · Suse Linux Enterprise Kernel-Ec2-Devel +8

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.13.4 SUSE Linux Enterprise kernel-pae-devel affected versions not specified SUSE Linux Enterprise kernel-xen-devel affected versions not specified SUSE Linux Enterprise gfs2-kmp-xen affected versions not...

PT-2012-6332 · Suse +3 · Suse Linux Enterprise Kernel-Ec2-Devel +7

Name of the Vulnerable Software and Affected Versions: Linux kernel version 3.7.4 and earlier SUSE Linux Enterprise kernel-pae-devel affected versions not specified SUSE Linux Enterprise kernel-xen-devel affected versions not specified SUSE Linux Enterprise gfs2-kmp-xen affected versions not...