xen - security update

Fixed packages 1

Vulnerabilities 19

• Critical 10.0
  CVE-2015-8104

  The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a deni…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Nov 16, 2015
• Unscored —
  CVE-2015-2752

  The XEN_DOMCTL_memory_mapping hypercall in Xen 3.2.x through 4.5.x, when using a PCI passthrough device, is not preempt…

  xen xen Debian Ubuntu
  Apr 1, 2015
• Unscored —
  CVE-2015-2756

  QEMU, as used in Xen 3.3.x through 4.5.x, does not properly restrict access to PCI command registers, which might allow…

  xen qemu xen qemu Debian Ubuntu
  Apr 1, 2015
• Unscored —
  CVE-2015-5165 EPSS 13%

  The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allow…

  xen qemu xen qemu Debian Ubuntu
  Aug 12, 2015
• Unscored —
  CVE-2015-5307

  The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a deni…

  linux linux xen virtualbox Debian Ubuntu
  Nov 16, 2015
• Unscored —
  CVE-2015-7969

  Multiple memory leaks in Xen 4.0 through 4.6.x allow local guest administrators or domains with certain permission to c…

  xen xen Debian Ubuntu
  Oct 30, 2015
• Unscored —
  CVE-2015-7970

  The p2m_pod_emergency_sweep function in arch/x86/mm/p2m-pod.c in Xen 3.4.x, 3.5.x, and 3.6.x is not preemptible, which …

  xen xen Debian Ubuntu
  Oct 30, 2015
• Unscored —
  CVE-2015-7971

  Xen 3.2.x through 4.6.x does not limit the number of printk console messages when logging certain pmu and profiling hyp…

  xen xen Debian Ubuntu
  Oct 30, 2015
• Unscored —
  CVE-2015-7972

  The (1) libxl_set_memory_target function in tools/libxl/libxl.c and (2) libxl__build_post function in tools/libxl/libxl…

  xen xen Debian Ubuntu
  Oct 30, 2015
• Unscored —
  CVE-2015-8339

  The memory_exchange function in common/memory.c in Xen 3.2.x through 4.6.x does not properly hand back pages to a domai…

  xen xen Debian Ubuntu
  Dec 17, 2015
• Unscored —
  CVE-2015-8340

  The memory_exchange function in common/memory.c in Xen 3.2.x through 4.6.x does not properly release locks, which might…

  xen xen Debian Ubuntu
  Dec 17, 2015
• Unscored —
  CVE-2015-8550 Public exploit

  Xen, when used on a system providing PV backends, allows local guest OS administrators to cause a denial of service (ho…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Apr 14, 2016
• Unscored —
  CVE-2015-8554

  Buffer overflow in hw/pt-msi.c in Xen 4.6.x and earlier, when using the qemu-xen-traditional (aka qemu-dm) device model…

  xen xen Debian Ubuntu
  Apr 14, 2016
• Unscored —
  CVE-2015-8555

  Xen 4.6.x, 4.5.x, 4.4.x, 4.3.x, and earlier do not initialize x86 FPU stack and XMM registers when XSAVE/XRSTOR are not…

  xen xen Debian Ubuntu
  Apr 13, 2016
• Unscored —
  CVE-2015-8615

  The hvm_set_callback_via function in arch/x86/hvm/irq.c in Xen 4.6 does not limit the number of printk console messages…

  xen Debian
  Jan 8, 2016
• Unscored —
  CVE-2016-1570

  The PV superpage functionality in arch/x86/mm.c in Xen 3.4.0, 3.4.1, and 4.1.x through 4.6.x allows local PV guests to …

  xen xen Debian Ubuntu
  Jan 22, 2016
• Unscored —
  CVE-2016-1571

  The paging_invlpg function in include/asm-x86/paging.h in Xen 3.3.x through 4.6.x, when using shadow mode paging or nes…

  xen xen Debian Ubuntu
  Jan 22, 2016
• Unscored —
  CVE-2016-2270

  Xen 4.6.x and earlier allows local guest administrators to cause a denial of service (host reboot) via vectors related …

  xen xen Debian Ubuntu
  Feb 19, 2016
• Unscored —
  CVE-2016-2271

  VMX in Xen 4.6.x and earlier, when using an Intel or Cyrix CPU, allows local HVM guest users to cause a denial of servi…

  xen xen Debian Ubuntu
  Feb 19, 2016