UbuntuUpdates.org

Bugs fixes in "xen"

Origin Bug number Title Date fixed
CVE CVE-2016-9817 Xen through 4.7.x allows local ARM guest OS users to cause a denial of service (host crash) via vectors involving a (1) data or (2) prefetch abort wi 2017-03-23
CVE CVE-2016-9816 Xen through 4.7.x allows local ARM guest OS users to cause a denial of service (host crash) via vectors involving an asynchronous abort while at EL2. 2017-03-23
CVE CVE-2016-9815 Xen through 4.7.x allows local ARM guest OS users to cause a denial of service (host panic) by sending an asynchronous abort. 2017-03-23
CVE CVE-2016-2271 VMX in Xen 4.6.x and earlier, when using an Intel or Cyrix CPU, allows local HVM guest users to cause a denial of service (guest crash) via vectors r 2017-03-23
CVE CVE-2015-8615 The hvm_set_callback_via function in arch/x86/hvm/irq.c in Xen 4.6 does not limit the number of printk console messages when logging the new callback 2017-03-23
CVE CVE-2016-1571 The paging_invlpg function in include/asm-x86/paging.h in Xen 3.3.x through 4.6.x, when using shadow mode paging or nested virtualization is enabled, 2017-03-23
CVE CVE-2016-1570 The PV superpage functionality in arch/x86/mm.c in Xen 3.4.0, 3.4.1, and 4.1.x through 4.6.x allows local PV guests to obtain sensitive information, 2017-03-23
CVE CVE-2015-8555 information leak in legacy x86 FPU/XMM initialization 2017-03-23
CVE CVE-2015-8341 libxl leak of pv kernel and initrd on error 2017-03-23
CVE CVE-2015-8340 XENMEM_exchange error handling issues 2017-03-23
CVE CVE-2015-8339 XENMEM_exchange error handling issues 2017-03-23
CVE CVE-2015-8338 long running memory operations on ARM 2017-03-23
CVE CVE-2015-8104 The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic o 2017-03-23
CVE CVE-2015-5307 RESERVED 2017-03-23
CVE CVE-2015-8550 paravirtualized drivers incautious about shared memory contents 2017-03-23
CVE CVE-2016-2270 Xen 4.6.x and earlier allows local guest administrators to cause a denial of service (host reboot) via vectors related to multiple mappings of MMIO p 2017-03-23
CVE CVE-2015-7972 The (1) libxl_set_memory_target function in tools/libxl/libxl.c and (2) libxl__build_post function in tools/libxl/libxl_dom.c in Xen 3.4.x through 4. 2017-03-23
CVE CVE-2015-7971 Xen 3.2.x through 4.6.x does not limit the number of printk console messages when logging certain pmu and profiling hypercalls, which allows local gu 2017-03-23
CVE CVE-2015-7970 The p2m_pod_emergency_sweep function in arch/x86/mm/p2m-pod.c in Xen 3.4.x, 3.5.x, and 3.6.x is not preemptible, which allows local x86 HVM guest adm 2017-03-23
CVE CVE-2015-7969 Multiple memory leaks in Xen 4.0 through 4.6.x allow local guest administrators or domains with certain permission to cause a denial of service (memo 2017-03-23



About   -   Send Feedback to @ubuntu_updates