xen - security update

Fixed packages 1

Vulnerabilities 19

• Unscored —
  CVE-2013-1432

  Xen 4.1.x and 4.2.x, when the XSA-45 patch is in place, does not properly maintain references on pages stored for defer…

  xen Debian
  Aug 28, 2013
• Unscored —
  CVE-2013-1442

  Xen 4.0 through 4.3.x, when using AVX or LWP capable CPUs, does not properly clear previous data from registers when us…

  xen Debian
  Sep 30, 2013
• Unscored —
  CVE-2013-2076

  Xen 4.0.x, 4.1.x, and 4.2.x, when running on AMD64 processors, only save/restore the FOP, FIP, and FDP x87 registers in…

  xen Debian
  Aug 28, 2013
• Unscored —
  CVE-2013-2077

  Xen 4.0.x, 4.1.x, and 4.2.x does not properly restrict the contents of a XRSTOR, which allows local PV guest users to c…

  xen Debian
  Aug 28, 2013
• Unscored —
  CVE-2013-2078

  Xen 4.0.2 through 4.0.4, 4.1.x, and 4.2.x allows local PV guest users to cause a denial of service (hypervisor crash) v…

  xen Debian
  Aug 14, 2013
• Unscored —
  CVE-2013-2194

  Multiple integer overflows in the Elf parser (libelf) in Xen 4.2.x and earlier allow local guest administrators with ce…

  xen Debian
  Aug 23, 2013
• Unscored —
  CVE-2013-2195

  The Elf parser (libelf) in Xen 4.2.x and earlier allow local guest administrators with certain permissions to have an u…

  xen Debian
  Aug 23, 2013
• Unscored —
  CVE-2013-2196

  Multiple unspecified vulnerabilities in the Elf parser (libelf) in Xen 4.2.x and earlier allow local guest administrato…

  xen Debian
  Aug 23, 2013
• Unscored —
  CVE-2013-2211

  The libxenlight (libxl) toolstack library in Xen 4.0.x, 4.1.x, and 4.2.x uses weak permissions for xenstore keys for pa…

  xen Debian
  Aug 28, 2013
• Unscored —
  CVE-2013-4329

  The xenlight library (libxl) in Xen 4.0.x through 4.2.x, when IOMMU is disabled, provides access to a busmastering-capa…

  xen Debian
  Sep 12, 2013
• Unscored —
  CVE-2013-4355

  Xen 4.3.x and earlier does not properly handle certain errors, which allows local HVM guests to obtain hypervisor stack…

  xen Debian
  Oct 1, 2013
• Unscored —
  CVE-2013-4361

  The fbld instruction emulation in Xen 3.3.x through 4.3.x does not use the correct variable for the source effective ad…

  xen Debian
  Oct 1, 2013
• Unscored —
  CVE-2013-4368

  The outs instruction emulation in Xen 3.1.x, 4.2.x, 4.3.x, and earlier, when using FS: or GS: segment override, uses an…

  xen Debian
  Oct 17, 2013
• Unscored —
  CVE-2013-4494

  Xen before 4.1.x, 4.2.x, and 4.3.x does not take the page_alloc_lock and grant_table.lock in the same order, which allo…

  xen Debian
  Nov 2, 2013
• Unscored —
  CVE-2013-4553

  The XEN_DOMCTL_getmemlist hypercall in Xen 3.4.x through 4.3.x (possibly 4.3.1) does not always obtain the page_alloc_l…

  xen Debian
  Dec 24, 2013
• Unscored —
  CVE-2014-1950

  Use-after-free vulnerability in the xc_cpupool_getinfo function in Xen 4.1.x through 4.3.x, when using a multithreaded …

  xen Debian
  Feb 14, 2014
• Unscored —
  CVE-2014-2599

  The HVMOP_set_mem_access HVM control operations in Xen 4.1.x for 32-bit and 4.1.x through 4.4.x for 64-bit allow local …

  xen xen Debian Ubuntu
  Mar 28, 2014
• Unscored —
  CVE-2014-3124

  The HVMOP_set_mem_type control in Xen 4.1 through 4.4.x allows local guest HVM administrators to cause a denial of serv…

  xen xen Debian Ubuntu
  May 7, 2014
• Unscored —
  CVE-2014-4021

  Xen 3.2.x through 4.4.x does not properly clean memory pages recovered from guests, which allows local guest OS users t…

  xen xen Debian Ubuntu
  Jun 18, 2014