CVE-2014-1895

Off-by-one error in the flasksecurityavccachestats function in xsm/flask/flaskop.c in Xen 4.2.x and 4.3.x, when the maximum number of physical CPUs are in use, allows local users to cause a denial of service host crash or obtain sensitive information from hypervisor memory by leveraging a...

SuSE 11.3 Security Update : Xen (SAT Patch Number 8973)

The SUSE Linux Enterprise Server 11 Service Pack 3 Xen hypervisor and toolset has been updated to 4.2.4 to fix various bugs and security issues : The following security issues have been addressed : - XSA-60: CVE-2013-2212: The vmxsetucmode function in Xen 3.3 through 4.3, when disabling chaches,...

Fedora 20 : xen-4.3.1-9.fc20 (2014-2170)

three security fixes: integer overflow in several XSM/Flask hypercalls XSA-84, Off-by-one error in FLASKAVCCACHESTAT hypercall XSA-85, libvchan failure handling malicious ring indexes XSA-86 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...