リモートホストは、GLSA-201612-56（Xen：複数の脆弱性）で説明されている脆弱性による影響を受けます。Xenで、複数の脆弱性が見つかりました。詳細については、以下に記載されているCVE識別番号を参照してください。影響：ローカルの攻撃者が、プロセスの権限で任意のコードを実行したり、ホストシステム上の権限を取得したり、サービス拒否状況を引き起こしたりする可能性があり、機密情報を入手する可能性もあります。回避策：現時点では、既知の回避策はありません。

在 Xen Hypervisor 中發現多個弱點。Common Vulnerabilities and Exposures 專案發現下列問題：- CVE-2016-7777 (XSA-190) SUSE 的 Jan Beulich 發現 Xen 並未對 x86 HVM 客戶機正確執行 CR0.TS 和 CR0.EM，使得客戶機使用者可在 hypervisor 準備執行模擬作業時，透過修改指示的方式，讀取或修改客戶機上任意工作的 FPU、MMX 或 XMM 暫存器狀態資訊。- CVE-2016-9379、CVE-2016-9380 (XSA-198) 劍橋大學學生經營運算設施的 Daniel Richman 和 Gabor Szarka 發現開機載入程式模擬器 pygrub 在向呼叫者報告時無法引用 (或例行性檢查) 其結果。惡意的客戶機管理員可利用此缺陷，造成資訊洩漏或拒絕服務。- CVE-2016-9382 (XSA-192) SUSE 的 Jan Beulich 發現 Xen 未正確處理切換為 Vm86 模式的 x86 工作。無權限的客戶機處理程序可利用此缺陷來損毀客戶機，或者提升至與客戶機作業系統相當的權限。- CVE-2016-9383 (XSA-195) Citrix 的 George Dunlap 發現 Xen x86 64 位元位元測試指示模擬發生故障。惡意的客戶機可利用此缺陷修改任意記憶體，造成執行任意程式碼、拒絕服務 (主機當機) 或資訊洩漏。- CVE-2016-9385 (XSA-193) Citrix 的 Andrew Cooper 發現 Xen 的 x86 區段基底寫入模擬缺少標準位址檢查。惡意的客戶機管理員可利用此缺陷造成主機當機，進而導致拒絕服務。- CVE-2016-9386 (XSA-191) Citrix 的 Andrew Cooper 發現 x86 null 區段並未被一律視為無法使用。無權限的客戶機使用者程式可能會藉此提升至與客戶機作業系統相當的權限。

遠端 OracleVM 系統缺少可解決重大安全性更新的必要修補程式：

  - BUILDINFO：
    commit=5e4dc2c5fbd14b065234c0b5e5b637e0e005fab7

  - pygrub：將結果返回給呼叫方時正確引用結果：(Ian Jackson) [Orabug：25094263] (CVE-2016-9379) (CVE-2016-9380)

  - x86emul：修復高位位移處理 (Jan Beulich) [Orabug：25088366] (CVE-2016-9383)

  - x86/PV：寫入 %fs 和 %gs base MSR 時，需要規範的地址 (Jan Beulich) [Orabug：25087576] (CVE-2016-9385)

  - x86/HVM：任務切換期間，請勿使用 VM86 模式加載 LDTR (Jan Beulich) [Orabug：25087539] (CVE-2016-9382)

  - x86/hvm：修復非當前段的處理 (Andrew Cooper) [Orabug：25087515] (CVE-2016-9386)

  - BUILDINFO：
    commit=286bb9711e33d92767e8608bea4d3da6dbeeb710

  - vm 建立期間，將 TLB-flush 過濾移至 populate_physmap 中 (Dongli Zhang) [Orabug：24951888]

  - 使用內聯函式替換 tlbflush 檢查和操作 (Dongli Zhang) [Orabug：24951888]

  - x86/hvm：使用 vcpu id 擴展 HVM cpuid 葉 (Paul Durrant) - x86/hvm：添加 HVM 特定管理程序 CPUID 葉 (Boris Ostrovsky) - xend：soft_reset 支援。
    (Konrad Rzeszutek Wilk) - (lib)xl：軟重置支援 (Vitaly Kuznetsov) - tools/libxl：保存並還原 EMULATOR_XENSTORE_DATA 內容 (Andrew Cooper) - libxl：
    引入 libxl__device_model_xs_path (Wei Liu) - libxl：
    添加 LIBXL_DEVICE_MODEL_SAVE_FILE (Vitaly Kuznetsov) - libxc：支援 XEN_DOMCTL_soft_reset 操作 (Vitaly Kuznetsov) - domain_soft_reset 的特定架構掛鉤 (Vitaly Kuznetsov) - flask：DOMCTL_soft_reset 支援 (Vitaly Kuznetsov) - 引入 XEN_DOMCTL_soft_reset (Vitaly Kuznetsov) - evtchn：使 evtchn_reset 準備軟重置 (Vitaly Kuznetsov) - evtchn：使 EVTCHNOP_reset 適用於 kexec (Vitaly Kuznetsov) - xl：引入枚舉 domain_restart_type (Vitaly Kuznetsov) - libxl：支援 SHUTDOWN_soft_reset 關閉原因 (Vitaly Kuznetsov) - 引入 SHUTDOWN_soft_reset 關閉原因 (Vitaly Kuznetsov) - x86emul：遵循客體 CR0.TS 和 CR0.EM (Jan Beulich) [Orabug：24697001] (CVE-2016-7777)

遠端主機受到 GLSA-201612-56 中所述的弱點影響 (Xen：多個弱點)

    在 Xen 中發現多個弱點。如需詳細資訊，請檢閱下方提及的 CVE 識別碼。
  影響：

    本機攻擊者可能以處理程序的權限執行任意程式碼、取得在主機系統上的權限、造成拒絕服務情形或是取得敏感資訊。
  因應措施：

    目前尚無已知的因應措施。

在 Xen Hypervisor 中發現多個弱點。Common Vulnerabilities and Exposures 專案發現下列問題：CVE-2016-9379、CVE-2016-9380 (XSA-198) 開機載入程式模擬器 pygrub 在向呼叫者報告時無法引用 (或例行性檢查) 其結果。惡意的客戶機管理員可獲得敏感主機檔案的內容 CVE-2016-9381 (XSA-197) 編譯器會在 qemu 中發射出最佳化，導致出現雙重擷取弱點。惡意的管理員可利用此弱點接管 qemu 處理程序，藉此提升至與 qemu 處理程序相當的權限。CVE-2016-9382 (XSA-192) LDTR 就跟 TR 一樣是純粹的保護模式設施。因此即使切換為 VM86 模式工作，LDTR 載入亦須遵守保護模式語意。無權限的惡意客戶機處理程序可損毀或提升至與客戶機作業系統相當的權限。CVE-2016-9383 (XSA-195) Xen 需要模擬某些指示時，內部會重新計算給 Xen 的記憶體位址和暫存器運算元，以利提升模擬的處理效率。重新計算的過程中會捨棄中間運算式的高位元，導致記憶體位置和暫存器運算元錯誤。惡意的客戶機可修改任意記憶體。CVE-2016-9386 (XSA-191) Xen x86 模擬器在執行記憶體存取時並未考慮到區段的不可用性。無權限的客戶機使用者程式可能會藉此提升至與客戶機作業系統相當的權限。針對 Debian 7「Wheezy」，這些問題已在 4.1.6.lts1-4 版本中修正。針對 Debian 8「Jessie」，這些問題將於近期內修正。建議您升級 xen 套件。注意：Tenable Network Security 已直接從 DLA 安全性公告擷取前置描述區塊。Tenable 已盡量在不造成其他問題的前提下，嘗試自動清理並將其格式化。

xen was updated to version 4.7.1 to fix 17 security issues. These security issues were fixed :

  - CVE-2016-9637: ioport array overflow allowing a     malicious guest administrator can escalate their     privilege to that of the host (bsc#1011652).

  - CVE-2016-9386: x86 null segments were not always treated     as unusable allowing an unprivileged guest user program     to elevate its privilege to that of the guest operating     system. Exploit of this vulnerability is easy on Intel     and more complicated on AMD (bsc#1009100).

  - CVE-2016-9382: x86 task switch to VM86 mode was     mis-handled, allowing a unprivileged guest process to     escalate its privilege to that of the guest operating     system on AMD hardware. On Intel hardware a malicious     unprivileged guest process can crash the guest     (bsc#1009103).

  - CVE-2016-9385: x86 segment base write emulation lacked     canonical address checks, allowing a malicious guest     administrator to crash the host (bsc#1009104).

  - CVE-2016-9384: Guest 32-bit ELF symbol table load     leaking host data to unprivileged guest users     (bsc#1009105).

  - CVE-2016-9383: The x86 64-bit bit test instruction     emulation was broken, allowing a guest to modify     arbitrary memory leading to arbitray code execution     (bsc#1009107).

  - CVE-2016-9377: x86 software interrupt injection was     mis-handled, allowing an unprivileged guest user to     crash the guest (bsc#1009108).

  - CVE-2016-9378: x86 software interrupt injection was     mis-handled, allowing an unprivileged guest user to     crash the guest (bsc#1009108)

  - CVE-2016-9381: Improper processing of shared rings     allowing guest administrators take over the qemu     process, elevating their privilege to that of the qemu     process (bsc#1009109).

  - CVE-2016-9379: Delimiter injection vulnerabilities in     pygrub allowed guest administrators to obtain the     contents of sensitive host files or delete the files     (bsc#1009111).

  - CVE-2016-9380: Delimiter injection vulnerabilities in     pygrub allowed guest administrators to obtain the     contents of sensitive host files or delete the files     (bsc#1009111).

  - CVE-2016-7777: Xen did not properly honor CR0.TS and     CR0.EM, which allowed local x86 HVM guest OS users to     read or modify FPU, MMX, or XMM register state     information belonging to arbitrary tasks on the guest by     modifying an instruction while the hypervisor is     preparing to emulate it (bsc#1000106).

  - CVE-2016-8910: The rtl8139_cplus_transmit function in     hw/net/rtl8139.c allowed local guest OS administrators     to cause a denial of service (infinite loop and CPU     consumption) by leveraging failure to limit the ring     descriptor count (bsc#1007157).

  - CVE-2016-8667: The rc4030_write function in     hw/dma/rc4030.c in allowed local guest OS administrators     to cause a denial of service (divide-by-zero error and     QEMU process crash) via a large interval timer reload     value (bsc#1005004).

  - CVE-2016-8669: The serial_update_parameters function in     hw/char/serial.c allowed local guest OS administrators     to cause a denial of service (divide-by-zero error and     QEMU process crash) via vectors involving a value of     divider greater than baud base (bsc#1005005).

  - CVE-2016-7908: The mcf_fec_do_tx function in     hw/net/mcf_fec.c did not properly limit the buffer     descriptor count when transmitting packets, which     allowed local guest OS administrators to cause a denial     of service (infinite loop and QEMU process crash) via     vectors involving a buffer descriptor with a length of 0     and crafted values in bd.flags (bsc#1003030).

  - CVE-2016-7909: The pcnet_rdra_addr function in     hw/net/pcnet.c allowed local guest OS administrators to     cause a denial of service (infinite loop and QEMU     process crash) by setting the (1) receive or (2)     transmit descriptor ring length to 0 (bsc#1003032).

The update package also includes non-security fixes. See advisory for details.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for xen fixes several issues. These security issues were fixed :

  - CVE-2016-9637: ioport array overflow allowing a     malicious guest administrator can escalate their     privilege to that of the host (bsc#1011652)

  - CVE-2016-9386: x86 null segments were not always treated     as unusable allowing an unprivileged guest user program     to elevate its privilege to that of the guest operating     system. Exploit of this vulnerability is easy on Intel     and more complicated on AMD (bsc#1009100)

  - CVE-2016-9382: x86 task switch to VM86 mode was     mis-handled, allowing a unprivileged guest process to     escalate its privilege to that of the guest operating     system on AMD hardware. On Intel hardware a malicious     unprivileged guest process can crash the guest     (bsc#1009103)

  - CVE-2016-9385: x86 segment base write emulation lacked     canonical address checks, allowing a malicious guest     administrator to crash the host (bsc#1009104)

  - CVE-2016-9383: The x86 64-bit bit test instruction     emulation was broken, allowing a guest to modify     arbitrary memory leading to arbitray code execution     (bsc#1009107)

  - CVE-2016-9381: Improper processing of shared rings     allowing guest administrators take over the qemu     process, elevating their privilege to that of the qemu     process (bsc#1009109)

  - CVE-2016-9380: Delimiter injection vulnerabilities in     pygrub allowed guest administrators to obtain the     contents of sensitive host files or delete the files     (bsc#1009111)

  - CVE-2016-9379: Delimiter injection vulnerabilities in     pygrub allowed guest administrators to obtain the     contents of sensitive host files or delete the files     (bsc#1009111)

  - CVE-2016-7777: Xen did not properly honor CR0.TS and     CR0.EM, which allowed local x86 HVM guest OS users to     read or modify FPU, MMX, or XMM register state     information belonging to arbitrary tasks on the guest by     modifying an instruction while the hypervisor is     preparing to emulate it (bsc#1000106)

  - CVE-2016-8910: The rtl8139_cplus_transmit function in     hw/net/rtl8139.c allowed local guest OS administrators     to cause a denial of service (infinite loop and CPU     consumption) by leveraging failure to limit the ring     descriptor count (bsc#1007157)

  - CVE-2016-8909: The intel_hda_xfer function in     hw/audio/intel-hda.c allowed local guest OS     administrators to cause a denial of service (infinite     loop and CPU consumption) via an entry with the same     value for buffer length and pointer position     (bsc#1007160)

  - CVE-2016-8667: The rc4030_write function in     hw/dma/rc4030.c in allowed local guest OS administrators     to cause a denial of service (divide-by-zero error and     QEMU process crash) via a large interval timer reload     value (bsc#1005004)

  - CVE-2016-8669: The serial_update_parameters function in     hw/char/serial.c allowed local guest OS administrators     to cause a denial of service (divide-by-zero error and     QEMU process crash) via vectors involving a value of     divider greater than baud base (bsc#1005005)

  - CVE-2016-8576: The xhci_ring_fetch function in     hw/usb/hcd-xhci.c allowed local guest OS administrators     to cause a denial of service (infinite loop and QEMU     process crash) by leveraging failure to limit the number     of link Transfer Request Blocks (TRB) to process     (bsc#1004016)

  - CVE-2016-7908: The mcf_fec_do_tx function in     hw/net/mcf_fec.c did not properly limit the buffer     descriptor count when transmitting packets, which     allowed local guest OS administrators to cause a denial     of service (infinite loop and QEMU process crash) via     vectors involving a buffer descriptor with a length of 0     and crafted values in bd.flags (bsc#1003030)

  - CVE-2016-7909: The pcnet_rdra_addr function in     hw/net/pcnet.c allowed local guest OS administrators to     cause a denial of service (infinite loop and QEMU     process crash) by setting the (1) receive or (2)     transmit descriptor ring length to 0 (bsc#1003032)

The update package also includes non-security fixes. See advisory for details.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for xen fixes several issues. These security issues were fixed :

  - CVE-2016-9637: ioport array overflow allowing a     malicious guest administrator can escalate their     privilege to that of the host (bsc#1011652)

  - CVE-2016-9386: x86 null segments were not always treated     as unusable allowing an unprivileged guest user program     to elevate its privilege to that of the guest operating     system. Exploit of this vulnerability is easy on Intel     and more complicated on AMD (bsc#1009100)

  - CVE-2016-9382: x86 task switch to VM86 mode was     mis-handled, allowing a unprivileged guest process to     escalate its privilege to that of the guest operating     system on AMD hardware. On Intel hardware a malicious     unprivileged guest process can crash the guest     (bsc#1009103)

  - CVE-2016-9383: The x86 64-bit bit test instruction     emulation was broken, allowing a guest to modify     arbitrary memory leading to arbitray code execution     (bsc#1009107)

  - CVE-2016-9381: Improper processing of shared rings     allowing guest administrators take over the qemu     process, elevating their privilege to that of the qemu     process (bsc#1009109)

  - CVE-2016-9380: Delimiter injection vulnerabilities in     pygrub allowed guest administrators to obtain the     contents of sensitive host files or delete the files     (bsc#1009111)

  - CVE-2016-9379: Delimiter injection vulnerabilities in     pygrub allowed guest administrators to obtain the     contents of sensitive host files or delete the files     (bsc#1009111)

  - CVE-2016-7777: Xen did not properly honor CR0.TS and     CR0.EM, which allowed local x86 HVM guest OS users to     read or modify FPU, MMX, or XMM register state     information belonging to arbitrary tasks on the guest by     modifying an instruction while the hypervisor is     preparing to emulate it (bsc#1000106)

  - CVE-2016-8910: The rtl8139_cplus_transmit function in     hw/net/rtl8139.c allowed local guest OS administrators     to cause a denial of service (infinite loop and CPU     consumption) by leveraging failure to limit the ring     descriptor count (bsc#1007157)

  - CVE-2016-8909: The intel_hda_xfer function in     hw/audio/intel-hda.c allowed local guest OS     administrators to cause a denial of service (infinite     loop and CPU consumption) via an entry with the same     value for buffer length and pointer position     (bsc#1007160)

  - CVE-2016-8667: The rc4030_write function in     hw/dma/rc4030.c in allowed local guest OS administrators     to cause a denial of service (divide-by-zero error and     QEMU process crash) via a large interval timer reload     value (bsc#1005004)

  - CVE-2016-8669: The serial_update_parameters function in     hw/char/serial.c allowed local guest OS administrators     to cause a denial of service (divide-by-zero error and     QEMU process crash) via vectors involving a value of     divider greater than baud base (bsc#1005005)

  - CVE-2016-7908: The mcf_fec_do_tx function in     hw/net/mcf_fec.c did not properly limit the buffer     descriptor count when transmitting packets, which     allowed local guest OS administrators to cause a denial     of service (infinite loop and QEMU process crash) via     vectors involving a buffer descriptor with a length of 0     and crafted values in bd.flags (bsc#1003030)

  - CVE-2016-7909: The pcnet_rdra_addr function in     hw/net/pcnet.c allowed local guest OS administrators to     cause a denial of service (infinite loop and QEMU     process crash) by setting the (1) receive or (2)     transmit descriptor ring length to 0 (bsc#1003032)

The update package also includes non-security fixes. See advisory for details.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to its self-reported version number, the Xen hypervisor installed on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities :

  - A flaw exists in the inject_swint() function in     x86_emulate.c due to improper handling of the format of     IDT lookups when emulating instructions which generate     software interrupts. A guest attacker can exploit this     to crash the host, resulting in a denial of service     condition. (CVE-2016-9377)

  - A flaw exists in the svm_inject_trap() function in svm.c     due to a failure to properly perform IDT privilege     checks when emulating instructions which generate     software interrupts. A guest attacker can exploit this     to crash the host, resulting in a denial of service     condition. (CVE-2016-9378)

  - A flaw exists in the sniff_netware() function in file     tools/pygrub/src/pygrub due to improper handling of     string quotes and S-expressions in the bootloader when     the S-expressions output format is requested. A guest     attacker can exploit this to cause the bootloader     configuration file to produce incorrect output,     resulting in the disclosure or deletion of files from     the host. (CVE-2016-9379)

  - A flaw exists in the sniff_netware() function in file     tools/pygrub/src/pygrub due to improper handling of NULL     bytes in the bootloader when the null-delimited output     format is requested. A guest attacker can exploit this     to cause configuration files to output ambiguous or     confusing results, resulting in the disclosure or     deletion of files from the host. (CVE-2016-9380)

  - A double-fetch flaw exists that is triggered when the     compiler omits QEMU optimizations. A guest attacker can     exploit this to gain elevated privileges on the host.
    (CVE-2016-9381)

  - A flaw exists in the hvm_task_switch() function in hvm.c     due to improper handling of x86 task switching to VM86     mode. A guest attacker can exploit this to cause a     denial of service condition or gain elevated privileges     within the guest environment. (CVE-2016-9382)

  - A flaw exists in the x86_emulate() function in     x86_emulate.c that allows a guest attacker to cause     changes to memory and thereby gain elevated privileges     on the host. (CVE-2016-9383)

  - A flaw exists that is triggered as unused bytes in     image metadata are not properly cleared during symbol     table loading. This may allow a guest attacker to     disclose potentially sensitive information from the     host. (CVE-2016-9384)

  - A flaw exists due to improper clearing of unused bytes     in image metadata during symbol table loading. A guest     attacker can exploit this to disclose sensitive     information from the host. (CVE-2016-9384)

  - A flaw exists in the x86 segment base write emulation     due to a lack of canonical address checks. A guest     attacker can exploit this issue to crash the host,     resulting in a denial of service condition.
    (CVE-2016-9385)

  - A flaw exists in the x86 emulator due to improper     validation of the usability of segments when performing     memory accesses. A guest attacker can exploit this to     gain elevated privileges within the guest environment.
    (CVE-2016-9386)

Note that Nessus has checked the changeset versions based on the xen.git change log. Nessus did not check guest hardware configurations or if patches were applied manually to the source code before a recompile and reinstall.

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2016-0165 for details.

The version of Citrix XenServer running on the remote host is missing a security hotfix. It is, therefore, affected by multiple vulnerabilities :

  - A flaw exists in the sniff_netware() function within     file tools/pygrub/src/pygrub when handling string quotes     and S-expressions in the bootloader whenever the     S-expressions output format is requested. A guest     attacker can exploit this to cause the bootloader     configuration file to produce incorrect output,     resulting in the disclosure or deletion of files from     the host. (CVE-2016-9379)

  - A flaw exists in the sniff_netware() function within     file tools/pygrub/src/pygrub when handling NULL bytes in     the bootloader whenever the null-delimited output format     is requested. A guest attacker can exploit this to cause     configuration files to output ambiguous or confusing     results, resulting in the disclosure or deletion of files     from the host. (CVE-2016-9380)

  - A double-fetch flaw exists that is triggered when the     compiler omits QEMU optimizations. A guest attacker can     exploit this to gain elevated privileges on the host.
    (CVE-2016-9381)

  - A flaw exists in the hvm_task_switch() function within     file arch/x86/hvm/hvm.c due to improper handling of x86     task switching to VM86 mode. A guest attacker can     exploit this to cause a denial of service condition or     gain elevated privileges within the guest environment.
    (CVE-2016-9382)

  - A flaw exists in the x86_emulate() function within     file arch/x86/x86_emulate/x86_emulate.c that allows a     guest attacker to cause changes to memory and thereby     gain elevated privileges on the host. (CVE-2016-9383)

  - A denial of service vulnerability exists in the x86     segment base write emulation that is related to lacking     canonical address checks. A local attacker who has     administrative rights within a guest can exploit this     issue to crash the host. (CVE-2016-9385)

  - A flaw exists in the x86 emulator due to improper     checking of the usability of segments when performing     memory accesses. A guest attacker can exploit this to     gain elevated privileges. (CVE-2016-9386)

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2016-0166 for details.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
96231	GLSA-201612-56：Xen：複数の脆弱性	Nessus	Gentoo Local Security Checks	2017/1/3	2021/1/11	high
95610	Debian DSA-3729-1：xen - 安全性更新	Nessus	Debian Local Security Checks	2016/12/8	2021/1/11	high
95278	OracleVM 3.4：xen (OVMSA-2016-0164)	Nessus	OracleVM Local Security Checks	2016/11/23	2021/1/4	high
96231	GLSA-201612-56 ：Xen：多個弱點	Nessus	Gentoo Local Security Checks	2017/1/3	2021/1/11	high
95296	Debian DLA-720-1：xen 安全性更新	Nessus	Debian Local Security Checks	2016/11/25	2021/1/11	high
95709	SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2016:3067-1)	Nessus	SuSE Local Security Checks	2016/12/12	2021/1/6	high
96032	SUSE SLES11 Security Update : xen (SUSE-SU-2016:3174-1)	Nessus	SuSE Local Security Checks	2016/12/20	2021/1/19	high
96150	SUSE SLES11 Security Update : xen (SUSE-SU-2016:3273-1)	Nessus	SuSE Local Security Checks	2016/12/27	2021/1/19	high
95630	Xen Multiple Vulnerabilities (XSA-191 - XSA-198)	Nessus	Misc.	2016/12/8	2020/7/10	high
95279	OracleVM 3.3 : xen (OVMSA-2016-0165)	Nessus	OracleVM Local Security Checks	2016/11/23	2021/1/4	high
95539	Citrix XenServer Multiple Vulnerabilities (CTX218775)	Nessus	Misc.	2016/12/5	2019/11/13	high
95280	OracleVM 3.2 : xen (OVMSA-2016-0166)	Nessus	OracleVM Local Security Checks	2016/11/23	2021/1/4	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high

high

high