UbuntuUpdates.org

Bugs fixes in "xen"

Origin Bug number Title Date fixed
CVE CVE-2016-9818 Xen through 4.7.x allows local ARM guest OS users to cause a denial of service (host crash) via vectors involving an asynchronous abort while at HYP. 2017-03-16
CVE CVE-2016-9817 Xen through 4.7.x allows local ARM guest OS users to cause a denial of service (host crash) via vectors involving a (1) data or (2) prefetch abort wi 2017-03-16
CVE CVE-2016-9816 Xen through 4.7.x allows local ARM guest OS users to cause a denial of service (host crash) via vectors involving an asynchronous abort while at EL2. 2017-03-16
CVE CVE-2016-9815 Xen through 4.7.x allows local ARM guest OS users to cause a denial of service (host panic) by sending an asynchronous abort. 2017-03-16
CVE CVE-2016-9932 x86 CMPXCHG8B emulation fails to ignore operand size override 2017-03-16
CVE CVE-2016-9380 delimiter injection vulnerabilities in pygrub 2017-03-16
CVE CVE-2016-9379 delimiter injection vulnerabilities in pygrub 2017-03-16
CVE CVE-2016-9378 x86 software interrupt injection mis-handled 2017-03-16
CVE CVE-2016-9377 x86 software interrupt injection mis-handled 2017-03-16
CVE CVE-2016-9383 x86 64-bit bit test instruction emulation broken 2017-03-16
CVE CVE-2016-9385 x86 segment base write emulation lacking canonical address checks 2017-03-16
CVE CVE-2016-9382 x86 task switch to VM86 mode mis-handled 2017-03-16
CVE CVE-2016-9386 x86 null segments not always treated as unusable 2017-03-16
CVE CVE-2016-7777 Xen 4.7.x and earlier does not properly honor CR0.TS and CR0.EM, which allows local x86 HVM guest OS users to read or modify FPU, MMX, or XMM registe 2017-03-16
CVE CVE-2016-7094 Buffer overflow in Xen 4.7.x and earlier allows local x86 HVM guest OS administrators on guests running with shadow paging to cause a denial of servi 2017-03-16
CVE CVE-2016-7092 The get_page_from_l3e function in arch/x86/mm.c in Xen allows local 32-bit PV guest OS administrators to gain host OS privileges via vectors related 2017-03-16
CVE CVE-2016-6259 Xen 4.5.x through 4.7.x do not implement Supervisor Mode Access Prevention (SMAP) whitelisting in 32-bit exception and event delivery, which allows l 2017-03-16
CVE CVE-2016-6258 The PV pagetable code in arch/x86/mm.c in Xen 4.7.x and earlier allows local 32-bit PV guest OS administrators to gain host OS privileges by leveragi 2017-03-16
CVE CVE-2016-5242 The p2m_teardown function in arch/arm/p2m.c in Xen 4.4.x through 4.6.x allows local guest OS users with access to the driver domain to cause a denial 2017-03-16
CVE CVE-2016-4963 The libxl device-handling in Xen through 4.6.x allows local guest OS users with access to the driver domain to cause a denial of service (management 2017-03-16



About   -   Send Feedback to @ubuntu_updates