This update for xen fixes several issues. These security issues were fixed :

  - CVE-2016-9637: ioport array overflow allowing a     malicious guest administrator can escalate their     privilege to that of the host (bsc#1011652)

  - CVE-2016-9386: x86 null segments were not always treated     as unusable allowing an unprivileged guest user program     to elevate its privilege to that of the guest operating     system. Exploit of this vulnerability is easy on Intel     and more complicated on AMD (bsc#1009100)

  - CVE-2016-9382: x86 task switch to VM86 mode was     mis-handled, allowing a unprivileged guest process to     escalate its privilege to that of the guest operating     system on AMD hardware. On Intel hardware a malicious     unprivileged guest process can crash the guest     (bsc#1009103)

  - CVE-2016-9385: x86 segment base write emulation lacked     canonical address checks, allowing a malicious guest     administrator to crash the host (bsc#1009104)

  - CVE-2016-9383: The x86 64-bit bit test instruction     emulation was broken, allowing a guest to modify     arbitrary memory leading to arbitray code execution     (bsc#1009107)

  - CVE-2016-9381: Improper processing of shared rings     allowing guest administrators take over the qemu     process, elevating their privilege to that of the qemu     process (bsc#1009109)

  - CVE-2016-9380: Delimiter injection vulnerabilities in     pygrub allowed guest administrators to obtain the     contents of sensitive host files or delete the files     (bsc#1009111)

  - CVE-2016-9379: Delimiter injection vulnerabilities in     pygrub allowed guest administrators to obtain the     contents of sensitive host files or delete the files     (bsc#1009111)

  - CVE-2016-7777: Xen did not properly honor CR0.TS and     CR0.EM, which allowed local x86 HVM guest OS users to     read or modify FPU, MMX, or XMM register state     information belonging to arbitrary tasks on the guest by     modifying an instruction while the hypervisor is     preparing to emulate it (bsc#1000106)

  - CVE-2016-8910: The rtl8139_cplus_transmit function in     hw/net/rtl8139.c allowed local guest OS administrators     to cause a denial of service (infinite loop and CPU     consumption) by leveraging failure to limit the ring     descriptor count (bsc#1007157)

  - CVE-2016-8909: The intel_hda_xfer function in     hw/audio/intel-hda.c allowed local guest OS     administrators to cause a denial of service (infinite     loop and CPU consumption) via an entry with the same     value for buffer length and pointer position     (bsc#1007160)

  - CVE-2016-8667: The rc4030_write function in     hw/dma/rc4030.c in allowed local guest OS administrators     to cause a denial of service (divide-by-zero error and     QEMU process crash) via a large interval timer reload     value (bsc#1005004)

  - CVE-2016-8669: The serial_update_parameters function in     hw/char/serial.c allowed local guest OS administrators     to cause a denial of service (divide-by-zero error and     QEMU process crash) via vectors involving a value of     divider greater than baud base (bsc#1005005)

  - CVE-2016-8576: The xhci_ring_fetch function in     hw/usb/hcd-xhci.c allowed local guest OS administrators     to cause a denial of service (infinite loop and QEMU     process crash) by leveraging failure to limit the number     of link Transfer Request Blocks (TRB) to process     (bsc#1004016)

  - CVE-2016-7908: The mcf_fec_do_tx function in     hw/net/mcf_fec.c did not properly limit the buffer     descriptor count when transmitting packets, which     allowed local guest OS administrators to cause a denial     of service (infinite loop and QEMU process crash) via     vectors involving a buffer descriptor with a length of 0     and crafted values in bd.flags (bsc#1003030)

  - CVE-2016-7909: The pcnet_rdra_addr function in     hw/net/pcnet.c allowed local guest OS administrators to     cause a denial of service (infinite loop and QEMU     process crash) by setting the (1) receive or (2)     transmit descriptor ring length to 0 (bsc#1003032)

The update package also includes non-security fixes. See advisory for details.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote OracleVM system is missing necessary patches to address critical security updates :

  - BUILDINFO:
    commit=5e4dc2c5fbd14b065234c0b5e5b637e0e005fab7

  - pygrub: Properly quote results, when returning them to     the caller: (Ian Jackson) [Orabug: 25094263]     (CVE-2016-9379) (CVE-2016-9380)

  - x86emul: fix huge bit offset handling (Jan Beulich)     [Orabug: 25088366] (CVE-2016-9383)

  - x86/PV: writes of %fs and %gs base MSRs require     canonical addresses (Jan Beulich) [Orabug: 25087576]     (CVE-2016-9385)

  - x86/HVM: don't load LDTR with VM86 mode attrs during     task switch (Jan Beulich) [Orabug: 25087539]     (CVE-2016-9382)

  - x86/hvm: Fix the handling of non-present segments     (Andrew Cooper) [Orabug: 25087515] (CVE-2016-9386)

  - BUILDINFO:
    commit=286bb9711e33d92767e8608bea4d3da6dbeeb710

  - move TLB-flush filtering out into populate_physmap     during vm creation (Dongli Zhang) [Orabug: 24951888]

  - replace tlbflush check and operation with inline     functions (Dongli Zhang) [Orabug: 24951888]

  - x86/hvm: extend HVM cpuid leaf with vcpu id (Paul     Durrant) - x86/hvm: add HVM-specific hypervisor CPUID     leaf (Boris Ostrovsky) - xend: soft_reset support.
    (Konrad Rzeszutek Wilk) - (lib)xl: soft reset support     (Vitaly Kuznetsov) - tools/libxl: Save and restore     EMULATOR_XENSTORE_DATA content (Andrew Cooper) - libxl:
    introduce libxl__device_model_xs_path (Wei Liu) - libxl:
    add LIBXL_DEVICE_MODEL_SAVE_FILE (Vitaly Kuznetsov) -     libxc: support XEN_DOMCTL_soft_reset operation (Vitaly     Kuznetsov) - arch-specific hooks for domain_soft_reset     (Vitaly Kuznetsov) - flask: DOMCTL_soft_reset support     (Vitaly Kuznetsov) - introduce XEN_DOMCTL_soft_reset     (Vitaly Kuznetsov) - evtchn: make evtchn_reset ready for     soft reset (Vitaly Kuznetsov) - evtchn: make     EVTCHNOP_reset suitable for kexec (Vitaly Kuznetsov) -     xl: introduce enum domain_restart_type (Vitaly     Kuznetsov) - libxl: support SHUTDOWN_soft_reset shutdown     reason (Vitaly Kuznetsov) - introduce     SHUTDOWN_soft_reset shutdown reason (Vitaly Kuznetsov) -     x86emul: honor guest CR0.TS and CR0.EM (Jan Beulich)     [Orabug: 24697001] (CVE-2016-7777)

This update for xen to version 4.5.5 fixes several issues. These security issues were fixed :

  - CVE-2016-9637: ioport array overflow allowing a     malicious guest administrator can escalate their     privilege to that of the host (bsc#1011652)

  - CVE-2016-9386: x86 null segments were not always treated     as unusable allowing an unprivileged guest user program     to elevate its privilege to that of the guest operating     system. Exploit of this vulnerability is easy on Intel     and more complicated on AMD (bsc#1009100)

  - CVE-2016-9382: x86 task switch to VM86 mode was     mis-handled, allowing a unprivileged guest process to     escalate its privilege to that of the guest operating     system on AMD hardware. On Intel hardware a malicious     unprivileged guest process can crash the guest     (bsc#1009103)

  - CVE-2016-9385: x86 segment base write emulation lacked     canonical address checks, allowing a malicious guest     administrator to crash the host (bsc#1009104)

  - CVE-2016-9383: The x86 64-bit bit test instruction     emulation was broken, allowing a guest to modify     arbitrary memory leading to arbitray code execution     (bsc#1009107)

  - CVE-2016-9378: x86 software interrupt injection was     mis-handled, allowing an unprivileged guest user to     crash the guest (bsc#1009108)

  - CVE-2016-9377: x86 software interrupt injection was     mis-handled, allowing an unprivileged guest user to     crash the guest (bsc#1009108)

  - CVE-2016-9381: Improper processing of shared rings     allowing guest administrators take over the qemu     process, elevating their privilege to that of the qemu     process (bsc#1009109)

  - CVE-2016-9380: Delimiter injection vulnerabilities in     pygrub allowed guest administrators to obtain the     contents of sensitive host files or delete the files     (bsc#1009111)

  - CVE-2016-9379: Delimiter injection vulnerabilities in     pygrub allowed guest administrators to obtain the     contents of sensitive host files or delete the files     (bsc#1009111)

  - CVE-2016-7777: Xen did not properly honor CR0.TS and     CR0.EM, which allowed local x86 HVM guest OS users to     read or modify FPU, MMX, or XMM register state     information belonging to arbitrary tasks on the guest by     modifying an instruction while the hypervisor is     preparing to emulate it (bsc#1000106)

  - CVE-2016-8910: The rtl8139_cplus_transmit function in     hw/net/rtl8139.c allowed local guest OS administrators     to cause a denial of service (infinite loop and CPU     consumption) by leveraging failure to limit the ring     descriptor count (bsc#1007157)

  - CVE-2016-8909: The intel_hda_xfer function in     hw/audio/intel-hda.c allowed local guest OS     administrators to cause a denial of service (infinite     loop and CPU consumption) via an entry with the same     value for buffer length and pointer position     (bsc#1007160).

  - CVE-2016-8667: The rc4030_write function in     hw/dma/rc4030.c in allowed local guest OS administrators     to cause a denial of service (divide-by-zero error and     QEMU process crash) via a large interval timer reload     value (bsc#1005004)

  - CVE-2016-8669: The serial_update_parameters function in     hw/char/serial.c allowed local guest OS administrators     to cause a denial of service (divide-by-zero error and     QEMU process crash) via vectors involving a value of     divider greater than baud base (bsc#1005005)

  - CVE-2016-7995: A memory leak in ehci_process_itd allowed     a privileged user inside guest to DoS the host     (bsc#1003870).

  - CVE-2016-8576: The xhci_ring_fetch function in     hw/usb/hcd-xhci.c allowed local guest OS administrators     to cause a denial of service (infinite loop and QEMU     process crash) by leveraging failure to limit the number     of link Transfer Request Blocks (TRB) to process     (bsc#1004016).

  - CVE-2016-7908: The mcf_fec_do_tx function in     hw/net/mcf_fec.c did not properly limit the buffer     descriptor count when transmitting packets, which     allowed local guest OS administrators to cause a denial     of service (infinite loop and QEMU process crash) via     vectors involving a buffer descriptor with a length of 0     and crafted values in bd.flags (bsc#1003030)

  - CVE-2016-7909: The pcnet_rdra_addr function in     hw/net/pcnet.c allowed local guest OS administrators to     cause a denial of service (infinite loop and QEMU     process crash) by setting the (1) receive or (2)     transmit descriptor ring length to 0 (bsc#1003032)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for xen fixes several issues. These security issues were fixed :

  - CVE-2016-9637: ioport array overflow allowing a     malicious guest administrator can escalate their     privilege to that of the host (bsc#1011652)

  - CVE-2016-9386: x86 null segments were not always treated     as unusable allowing an unprivileged guest user program     to elevate its privilege to that of the guest operating     system. Exploit of this vulnerability is easy on Intel     and more complicated on AMD (bsc#1009100)

  - CVE-2016-9382: x86 task switch to VM86 mode was     mis-handled, allowing a unprivileged guest process to     escalate its privilege to that of the guest operating     system on AMD hardware. On Intel hardware a malicious     unprivileged guest process can crash the guest     (bsc#1009103)

  - CVE-2016-9383: The x86 64-bit bit test instruction     emulation was broken, allowing a guest to modify     arbitrary memory leading to arbitray code execution     (bsc#1009107)

  - CVE-2016-9381: Improper processing of shared rings     allowing guest administrators take over the qemu     process, elevating their privilege to that of the qemu     process (bsc#1009109)

  - CVE-2016-9380: Delimiter injection vulnerabilities in     pygrub allowed guest administrators to obtain the     contents of sensitive host files or delete the files     (bsc#1009111)

  - CVE-2016-9379: Delimiter injection vulnerabilities in     pygrub allowed guest administrators to obtain the     contents of sensitive host files or delete the files     (bsc#1009111)

  - CVE-2016-7777: Xen did not properly honor CR0.TS and     CR0.EM, which allowed local x86 HVM guest OS users to     read or modify FPU, MMX, or XMM register state     information belonging to arbitrary tasks on the guest by     modifying an instruction while the hypervisor is     preparing to emulate it (bsc#1000106)

  - CVE-2016-8910: The rtl8139_cplus_transmit function in     hw/net/rtl8139.c allowed local guest OS administrators     to cause a denial of service (infinite loop and CPU     consumption) by leveraging failure to limit the ring     descriptor count (bsc#1007157)

  - CVE-2016-8909: The intel_hda_xfer function in     hw/audio/intel-hda.c allowed local guest OS     administrators to cause a denial of service (infinite     loop and CPU consumption) via an entry with the same     value for buffer length and pointer position     (bsc#1007160)

  - CVE-2016-8667: The rc4030_write function in     hw/dma/rc4030.c in allowed local guest OS administrators     to cause a denial of service (divide-by-zero error and     QEMU process crash) via a large interval timer reload     value (bsc#1005004)

  - CVE-2016-8669: The serial_update_parameters function in     hw/char/serial.c allowed local guest OS administrators     to cause a denial of service (divide-by-zero error and     QEMU process crash) via vectors involving a value of     divider greater than baud base (bsc#1005005)

  - CVE-2016-7908: The mcf_fec_do_tx function in     hw/net/mcf_fec.c did not properly limit the buffer     descriptor count when transmitting packets, which     allowed local guest OS administrators to cause a denial     of service (infinite loop and QEMU process crash) via     vectors involving a buffer descriptor with a length of 0     and crafted values in bd.flags (bsc#1003030)

  - CVE-2016-7909: The pcnet_rdra_addr function in     hw/net/pcnet.c allowed local guest OS administrators to     cause a denial of service (infinite loop and QEMU     process crash) by setting the (1) receive or (2)     transmit descriptor ring length to 0 (bsc#1003032)

The update package also includes non-security fixes. See advisory for details.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2020-0039 for details.

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2018-0248 for details.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Xen 4.7.x and earlier does not properly honor CR0.TS and CR0.EM, which allows local x86 HVM guest OS users     to read or modify FPU, MMX, or XMM register state information belonging to arbitrary tasks on the guest by     modifying an instruction while the hypervisor is preparing to emulate it. (CVE-2016-7777)

Note that Nessus relies on the presence of the package as reported by the vendor.

enable xen livepatch in hypervisor via .config file qemu-kvm:
Directory traversal flaw in 9p virtio backend [CVE-2016-7116] qemu:
hw: net: Heap overflow in xlnx.xps-ethernetlite [CVE-2016-7161] CR0.TS and CR0.EM not always honored for x86 HVM guest [XSA-190, CVE-2016-7777]

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Xen Project reports :

Instructions touching FPU, MMX, or XMM registers are required to raise a Device Not Available Exception (#NM) when either CR0.EM or CR0.TS are set. (Their AVX or AVX-512 extensions would consider only CR0.TS.) While during normal operation this is ensured by the hardware, if a guest modifies instructions while the hypervisor is preparing to emulate them, the #NM delivery could be missed.

Guest code in one task may thus (unintentionally or maliciously) read or modify register state belonging to another task in the same VM.

A malicious unprivileged guest user may be able to obtain or corrupt sensitive information (including cryptographic material) in other programs in the same guest.

This updates xen to version 4.5.5 to fix the following issues :

  - An unprivileged user in a guest could gain guest could     escalate privilege to that of the guest kernel, if it     had could invoke the instruction emulator. Only 64-bit     x86 HVM guest were affected. Linux guest have not been     vulnerable. (boo#1016340, CVE-2016-10013)

  - An unprivileged user in a 64 bit x86 guest could gain     information from the host, crash the host or gain     privilege of the host (boo#1009107, CVE-2016-9383)

  - An unprivileged guest process could (unintentionally or     maliciously) obtain or ocorrupt sensitive information of     other programs in the same guest. Only x86 HVM guests     have been affected. The attacker needs to be able to     trigger the Xen instruction emulator. (boo#1000106,     CVE-2016-7777)

  - A guest on x86 systems could read small parts of     hypervisor stack data (boo#1012651, CVE-2016-9932)

  - A malicious guest kernel could hang or crash the host     system (boo#1014298, CVE-2016-10024)

  - The epro100 emulated network device caused a memory leak     in the host when unplugged in the guest. A privileged     user in the guest could use this to cause a DoS on the     host or potentially crash the guest process on the host     (boo#1013668, CVE-2016-9101)

  - The ColdFire Fast Ethernet Controller was vulnerable to     an infinite loop that could be trigged by a privileged     user in the guest, leading to DoS (boo#1013657,     CVE-2016-9776)

  - A malicious guest administrator could escalate their     privilege to that of the host. Only affects x86 HVM     guests using qemu older version 1.6.0 or using the     qemu-xen-traditional. (boo#1011652, CVE-2016-9637)

  - An unprivileged guest user could escalate privilege to     that of the guest administrator on x86 HVM guests,     especially on Intel CPUs (boo#1009100, CVE-2016-9386)

  - An unprivileged guest user could escalate privilege to     that of the guest administrator (on AMD CPUs) or crash     the system (on Intel CPUs) on 32-bit x86 HVM guests.
    Only guest operating systems that allowed a new task to     start in VM86 mode were affected. (boo#1009103,     CVE-2016-9382)

  - A malicious guest administrator could crash the host on     x86 PV guests only (boo#1009104, CVE-2016-9385)

  - An unprivileged guest user was able to crash the guest.
    (boo#1009108, CVE-2016-9377, CVE-2016-9378)

  - A malicious guest administrator could get privilege of     the host emulator process on x86 HVM guests.
    (boo#1009109, CVE-2016-9381)

  - A vulnerability in pygrub allowed a malicious guest     administrator to obtain the contents of sensitive host     files, or even delete those files (boo#1009111,     CVE-2016-9379, CVE-2016-9380)

  - A privileged guest user could cause an infinite loop in     the RTL8139 ethernet emulation to consume CPU cycles on     the host, causing a DoS situation (boo#1007157,     CVE-2016-8910)

  - A privileged guest user could cause an infinite loop in     the intel-hda sound emulation to consume CPU cycles on     the host, causing a DoS situation (boo#1007160,     CVE-2016-8909)

  - A privileged guest user could cause a crash of the     emulator process on the host by exploiting a divide by     zero vulnerability of the JAZZ RC4030 chipset emulation     (boo#1005004 CVE-2016-8667)

  - A privileged guest user could cause a crash of the     emulator process on the host by exploiting a divide by     zero issue of the 16550A UART emulation (boo#1005005,     CVE-2016-8669)

  - A privileged guest user could cause a memory leak in the     USB EHCI emulation, causing a DoS situation on the host     (boo#1003870, CVE-2016-7995)

  - A privileged guest user could cause an infinite loop in     the USB xHCI emulation, causing a DoS situation on the     host (boo#1004016, CVE-2016-8576)

  - A privileged guest user could cause an infinite loop in     the ColdFire Fash Ethernet Controller emulation, causing     a DoS situation on the host (boo#1003030, CVE-2016-7908)

  - A privileged guest user could cause an infinite loop in     the AMD PC-Net II emulation, causing a DoS situation on     the host (boo#1003032, CVE-2016-7909)

  - Cause a reload of clvm in the block-dmmd script to avoid     a blocking lvchange call (boo#1002496)

xen was updated to version 4.7.1 to fix 17 security issues. These security issues were fixed :

  - CVE-2016-9637: ioport array overflow allowing a     malicious guest administrator can escalate their     privilege to that of the host (bsc#1011652).

  - CVE-2016-9386: x86 null segments were not always treated     as unusable allowing an unprivileged guest user program     to elevate its privilege to that of the guest operating     system. Exploit of this vulnerability is easy on Intel     and more complicated on AMD (bsc#1009100).

  - CVE-2016-9382: x86 task switch to VM86 mode was     mis-handled, allowing a unprivileged guest process to     escalate its privilege to that of the guest operating     system on AMD hardware. On Intel hardware a malicious     unprivileged guest process can crash the guest     (bsc#1009103).

  - CVE-2016-9385: x86 segment base write emulation lacked     canonical address checks, allowing a malicious guest     administrator to crash the host (bsc#1009104).

  - CVE-2016-9384: Guest 32-bit ELF symbol table load     leaking host data to unprivileged guest users     (bsc#1009105).

  - CVE-2016-9383: The x86 64-bit bit test instruction     emulation was broken, allowing a guest to modify     arbitrary memory leading to arbitray code execution     (bsc#1009107).

  - CVE-2016-9377: x86 software interrupt injection was     mis-handled, allowing an unprivileged guest user to     crash the guest (bsc#1009108).

  - CVE-2016-9378: x86 software interrupt injection was     mis-handled, allowing an unprivileged guest user to     crash the guest (bsc#1009108)

  - CVE-2016-9381: Improper processing of shared rings     allowing guest administrators take over the qemu     process, elevating their privilege to that of the qemu     process (bsc#1009109).

  - CVE-2016-9379: Delimiter injection vulnerabilities in     pygrub allowed guest administrators to obtain the     contents of sensitive host files or delete the files     (bsc#1009111).

  - CVE-2016-9380: Delimiter injection vulnerabilities in     pygrub allowed guest administrators to obtain the     contents of sensitive host files or delete the files     (bsc#1009111).

  - CVE-2016-7777: Xen did not properly honor CR0.TS and     CR0.EM, which allowed local x86 HVM guest OS users to     read or modify FPU, MMX, or XMM register state     information belonging to arbitrary tasks on the guest by     modifying an instruction while the hypervisor is     preparing to emulate it (bsc#1000106).

  - CVE-2016-8910: The rtl8139_cplus_transmit function in     hw/net/rtl8139.c allowed local guest OS administrators     to cause a denial of service (infinite loop and CPU     consumption) by leveraging failure to limit the ring     descriptor count (bsc#1007157).

  - CVE-2016-8667: The rc4030_write function in     hw/dma/rc4030.c in allowed local guest OS administrators     to cause a denial of service (divide-by-zero error and     QEMU process crash) via a large interval timer reload     value (bsc#1005004).

  - CVE-2016-8669: The serial_update_parameters function in     hw/char/serial.c allowed local guest OS administrators     to cause a denial of service (divide-by-zero error and     QEMU process crash) via vectors involving a value of     divider greater than baud base (bsc#1005005).

  - CVE-2016-7908: The mcf_fec_do_tx function in     hw/net/mcf_fec.c did not properly limit the buffer     descriptor count when transmitting packets, which     allowed local guest OS administrators to cause a denial     of service (infinite loop and QEMU process crash) via     vectors involving a buffer descriptor with a length of 0     and crafted values in bd.flags (bsc#1003030).

  - CVE-2016-7909: The pcnet_rdra_addr function in     hw/net/pcnet.c allowed local guest OS administrators to     cause a denial of service (infinite loop and QEMU     process crash) by setting the (1) receive or (2)     transmit descriptor ring length to 0 (bsc#1003032).

The update package also includes non-security fixes. See advisory for details.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
95822	SUSE SLES12 Security Update : xen (SUSE-SU-2016:3156-1)	Nessus	SuSE Local Security Checks	2016/12/14	2026/1/14	high
95278	OracleVM 3.4 : xen (OVMSA-2016-0164)	Nessus	OracleVM Local Security Checks	2016/11/23	2026/1/16	high
95761	SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2016:3083-1)	Nessus	SuSE Local Security Checks	2016/12/13	2026/1/14	high
96032	SUSE SLES11 Security Update : xen (SUSE-SU-2016:3174-1)	Nessus	SuSE Local Security Checks	2016/12/20	2026/1/8	high
96150	SUSE SLES11 Security Update : xen (SUSE-SU-2016:3273-1)	Nessus	SuSE Local Security Checks	2016/12/27	2026/1/7	high
140019	OracleVM 3.4 : xen (OVMSA-2020-0039) (Bunker Buster) (Foreshadow) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout) (Meltdown) (POODLE) (Spectre)	Nessus	OracleVM Local Security Checks	2020/8/28	2026/1/9	critical
111992	OracleVM 3.4 : xen (OVMSA-2018-0248) (Bunker Buster) (Foreshadow) (Meltdown) (POODLE) (Spectre)	Nessus	OracleVM Local Security Checks	2018/8/20	2026/1/9	critical
219769	Linux Distros Unpatched Vulnerability : CVE-2016-7777	Nessus	Misc.	2025/3/4	2026/1/28	medium
94827	Fedora 25 : xen (2016-81e5a36d8c)	Nessus	Fedora Local Security Checks	2016/11/15	2026/1/19	critical
95504	FreeBSD : xen-kernel -- CR0.TS and CR0.EM not always honored for x86 HVM guests (4d7cf654-ba4d-11e6-ae1b-002590263bf5)	Nessus	FreeBSD Local Security Checks	2016/12/5	2026/1/15	medium
96252	openSUSE Security Update : xen (openSUSE-2017-4)	Nessus	SuSE Local Security Checks	2017/1/3	2026/1/6	high
95709	SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2016:3067-1)	Nessus	SuSE Local Security Checks	2016/12/12	2026/1/14	high

检测

插件搜索

high

high

high

high

high

critical

critical

medium

critical

medium

high

high