Skip to content
OpenAdvisories
Unscored RHSA-2008:0194 6 CVEs

Red Hat Security Advisory: xen security and bug fix update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 12

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client xen 0:3.0.3-41.el5_1.5
Red Hat · RHEL 5 enterprise_linux:5::client xen-debuginfo 0:3.0.3-41.el5_1.5
Red Hat · RHEL 5 enterprise_linux:5::client xen-libs 0:3.0.3-41.el5_1.5
Red Hat · RHEL 5 enterprise_linux:5::server xen 0:3.0.3-41.el5_1.5
Red Hat · RHEL 5 enterprise_linux:5::server xen-debuginfo 0:3.0.3-41.el5_1.5
Red Hat · RHEL 5 enterprise_linux:5::server xen-libs 0:3.0.3-41.el5_1.5
Red Hat · Rhel Virtualization 5 rhel_virtualization:5::client xen 0:3.0.3-41.el5_1.5
Red Hat · Rhel Virtualization 5 rhel_virtualization:5::client xen-debuginfo 0:3.0.3-41.el5_1.5
Red Hat · Rhel Virtualization 5 rhel_virtualization:5::client xen-devel 0:3.0.3-41.el5_1.5
Red Hat · Rhel Virtualization 5 rhel_virtualization:5::server xen 0:3.0.3-41.el5_1.5
Red Hat · Rhel Virtualization 5 rhel_virtualization:5::server xen-debuginfo 0:3.0.3-41.el5_1.5
Red Hat · Rhel Virtualization 5 rhel_virtualization:5::server xen-devel 0:3.0.3-41.el5_1.5

Vulnerabilities 6

  • Unscored —
    CVE-2007-3919

    (1) xenbaked and (2) xenmon.py in Xen 3.1 and earlier allow local users to truncate arbitrary files via a symlink attac…

  • Unscored —
    CVE-2007-5730

    Heap-based buffer overflow in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to execute arb…

    qemu Debian
  • Unscored —
    CVE-2008-0928

    Qemu 0.9.1 and earlier does not perform range checks for block device read or write requests, which allows guest host u…

    qemu Debian
  • Unscored —
    CVE-2008-1943

    Buffer overflow in the backend of XenSource Xen Para Virtualized Frame Buffer (PVFB) 3.0 through 3.1.2 allows local use…

  • Unscored —
    CVE-2008-1944

    Buffer overflow in the backend framebuffer of XenSource Xen Para-Virtualized Framebuffer (PVFB) Message 3.0 through 3.0…

  • Unscored —
    CVE-2008-2004

    The drive_init function in QEMU 0.9.1 determines the format of a raw disk image based on the header, which allows local…

    qemu Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=350421
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=360381
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=433560
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=435495
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=443078
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=443390
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=444583
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0194.json
  • report
    https://access.redhat.com/security/cve/CVE-2007-3919
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-3919
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-3919
  • report
    https://access.redhat.com/security/cve/CVE-2007-5730
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-5730
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-5730
  • report
    https://access.redhat.com/security/cve/CVE-2008-0928
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-0928
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-0928
  • report
    https://access.redhat.com/security/cve/CVE-2008-1943
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-1943
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-1943
  • report
    https://access.redhat.com/security/cve/CVE-2008-1944
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-1944
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-1944
  • report
    https://access.redhat.com/security/cve/CVE-2008-2004
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-2004
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-2004