xen - security update

Fixed packages 1

Vulnerabilities 16

• Unscored —
  CVE-2017-14316

  A parameter verification issue was discovered in Xen through 4.9.x. The function `alloc_heap_pages` allows callers to s…

  xen xen xen Debian Ubuntu Alpine
  Sep 12, 2017
• Unscored —
  CVE-2017-14317

  A domain cleanup issue was discovered in the C xenstore daemon (aka cxenstored) in Xen through 4.9.x. When shutting dow…

  xen xen xen Debian Ubuntu Alpine
  Sep 12, 2017
• Unscored —
  CVE-2017-14318

  An issue was discovered in Xen 4.5.x through 4.9.x. The function `__gnttab_cache_flush` handles GNTTABOP_cache_flush gr…

  xen xen xen Debian Ubuntu Alpine
  Sep 12, 2017
• Unscored —
  CVE-2017-14319

  A grant unmapping issue was discovered in Xen through 4.9.x. When removing or replacing a grant mapping, the x86 PV spe…

  xen xen xen Debian Ubuntu Alpine
  Sep 12, 2017
• Unscored —
  CVE-2017-15588

  An issue was discovered in Xen through 4.9.x allowing x86 PV guest OS users to execute arbitrary code on the host OS be…

  xen xen xen Debian Ubuntu Alpine
  Oct 18, 2017
• Unscored —
  CVE-2017-15589

  An issue was discovered in Xen through 4.9.x allowing x86 HVM guest OS users to obtain sensitive information from the h…

  xen xen xen Debian Ubuntu Alpine
  Oct 18, 2017
• Unscored —
  CVE-2017-15590

  An issue was discovered in Xen through 4.9.x allowing x86 guest OS users to cause a denial of service (hypervisor crash…

  xen xen xen Debian Ubuntu Alpine
  Oct 18, 2017
• Unscored —
  CVE-2017-15591

  An issue was discovered in Xen 4.5.x through 4.9.x allowing attackers (who control a stub domain kernel or tool stack) …

  xen xen xen Debian Ubuntu Alpine
  Oct 18, 2017
• Unscored —
  CVE-2017-15592

  An issue was discovered in Xen through 4.9.x allowing x86 HVM guest OS users to cause a denial of service (hypervisor c…

  xen xen xen Debian Ubuntu Alpine
  Oct 18, 2017
• Unscored —
  CVE-2017-15593

  An issue was discovered in Xen through 4.9.x allowing x86 PV guest OS users to cause a denial of service (memory leak) …

  xen xen xen Debian Ubuntu Alpine
  Oct 18, 2017
• Unscored —
  CVE-2017-15594

  An issue was discovered in Xen through 4.9.x allowing x86 SVM PV guest OS users to cause a denial of service (hyperviso…

  xen xen xen Debian Ubuntu Alpine
  Oct 18, 2017
• Unscored —
  CVE-2017-15595 Public exploit

  An issue was discovered in Xen through 4.9.x allowing x86 PV guest OS users to cause a denial of service (unbounded rec…

  xen xen xen Debian Ubuntu Alpine
  Oct 18, 2017
• Unscored —
  CVE-2017-15597

  An issue was discovered in Xen through 4.9.x. Grant copying code made an implication that any grant pin would be accomp…

  xen xen xen Debian Ubuntu Alpine
  Oct 30, 2017
• Unscored —
  CVE-2017-17044

  An issue was discovered in Xen through 4.9.x allowing HVM guest OS users to cause a denial of service (infinite loop an…

  xen xen xen Debian Ubuntu Alpine
  Nov 28, 2017
• Unscored —
  CVE-2017-17045

  An issue was discovered in Xen through 4.9.x allowing HVM guest OS users to gain privileges on the host OS, obtain sens…

  xen xen xen Debian Ubuntu Alpine
  Nov 28, 2017
• Unscored —
  CVE-2017-17046

  An issue was discovered in Xen through 4.9.x on the ARM platform allowing guest OS users to obtain sensitive informatio…

  xen xen xen Debian Ubuntu Alpine
  Nov 28, 2017