xen - security update

Fixed packages 1

Vulnerabilities 15

• Unscored —
  CVE-2017-10912

  Xen through 4.8.x mishandles page transfer, which allows guest OS users to obtain privileged host OS access, aka XSA-21…

  xen xen xen Debian Ubuntu Alpine
  Jul 5, 2017
• Unscored —
  CVE-2017-10913

  The grant-table feature in Xen through 4.8.x provides false mapping information in certain cases of concurrent unmap ca…

  xen xen xen Debian Ubuntu Alpine
  Jul 5, 2017
• Unscored —
  CVE-2017-10914

  The grant-table feature in Xen through 4.8.x has a race condition leading to a double free, which allows guest OS users…

  xen xen xen Debian Ubuntu Alpine
  Jul 5, 2017
• Unscored —
  CVE-2017-10915

  The shadow-paging feature in Xen through 4.8.x mismanages page references and consequently introduces a race condition,…

  xen xen xen Debian Ubuntu Alpine
  Jul 5, 2017
• Unscored —
  CVE-2017-10918

  Xen through 4.8.x does not validate memory allocations during certain P2M operations, which allows guest OS users to ob…

  xen xen xen Debian Ubuntu Alpine
  Jul 5, 2017
• Unscored —
  CVE-2017-10920

  The grant-table feature in Xen through 4.8.x mishandles a GNTMAP_device_map and GNTMAP_host_map mapping, when followed …

  xen xen xen Debian Ubuntu Alpine
  Jul 5, 2017
• Unscored —
  CVE-2017-10921

  The grant-table feature in Xen through 4.8.x does not ensure sufficient type counts for a GNTMAP_device_map and GNTMAP_…

  xen xen xen Debian Ubuntu Alpine
  Jul 5, 2017
• Unscored —
  CVE-2017-10922

  The grant-table feature in Xen through 4.8.x mishandles MMIO region grant references, which allows guest OS users to ca…

  xen xen xen Debian Ubuntu Alpine
  Jul 5, 2017
• Unscored —
  CVE-2017-12135

  Xen allows local OS guest users to cause a denial of service (crash) or possibly obtain sensitive information or gain p…

  xen xen xen Debian Ubuntu Alpine
  Aug 24, 2017
• Unscored —
  CVE-2017-12137

  arch/x86/mm.c in Xen allows local PV guest OS users to gain host OS privileges via vectors related to map_grant_ref.

  xen xen xen Debian Ubuntu Alpine
  Aug 24, 2017
• Unscored —
  CVE-2017-12855

  Xen maintains the _GTF_{read,writ}ing bits as appropriate, to inform the guest that a grant is in use. A guest is expec…

  xen xen xen Debian Ubuntu Alpine
  Aug 15, 2017
• Unscored —
  CVE-2017-14316

  A parameter verification issue was discovered in Xen through 4.9.x. The function `alloc_heap_pages` allows callers to s…

  xen xen xen Debian Ubuntu Alpine
  Sep 12, 2017
• Unscored —
  CVE-2017-14317

  A domain cleanup issue was discovered in the C xenstore daemon (aka cxenstored) in Xen through 4.9.x. When shutting dow…

  xen xen xen Debian Ubuntu Alpine
  Sep 12, 2017
• Unscored —
  CVE-2017-14318

  An issue was discovered in Xen 4.5.x through 4.9.x. The function `__gnttab_cache_flush` handles GNTTABOP_cache_flush gr…

  xen xen xen Debian Ubuntu Alpine
  Sep 12, 2017
• Unscored —
  CVE-2017-14319

  A grant unmapping issue was discovered in Xen through 4.9.x. When removing or replacing a grant mapping, the x86 PV spe…

  xen xen xen Debian Ubuntu Alpine
  Sep 12, 2017