xen: various flaws (#1490884) Missing NUMA node parameter verification [XSA-231, CVE-2017-14316] Missing check for grant table [XSA-232, CVE-2017-14318] cxenstored: Race in domain cleanup [XSA-233, CVE-2017-14317] insufficient grant unmapping checks for x86 PV guests [XSA-234, CVE-2017-14319]

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2018-0248 for details.

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2020-0039 for details.

This update for xen fixes several issues.

These security issues were fixed :

  - CVE-2017-14316: Missing bound check in function     `alloc_heap_pages` for an internal array allowed     attackers using crafted hypercalls to execute arbitrary     code within Xen (XSA-231, bsc#1056278)

  - CVE-2017-14318: The function __gnttab_cache_flush missed     a check for grant tables, allowing a malicious guest to     crash the host or for x86 PV guests to potentially     escalate privileges (XSA-232, bsc#1056280)

  - CVE-2017-14317: A race in cxenstored may have cause a     double-free allowind for DoS of the xenstored daemon     (XSA-233, bsc#1056281).

  - CVE-2017-14319: An error while handling grant mappings     allowed malicious or buggy x86 PV guest to escalate its     privileges or crash the hypervisor (XSA-234,     bsc#1056282).

These non-security issues were fixed :

  - bsc#1057358: Fixed boot into SUSE Linux Enterprise 12.3     with secure boot

  - bsc#1055695: Fixed restoring updates for HVM guests for     ballooned domUs

This update was imported from the SUSE:SLE-12-SP3:Update update project.

This update for xen fixes several issues. These security issues were fixed :

  - CVE-2017-12135: Unbounded recursion in grant table code     allowed a malicious guest to crash the host or     potentially escalate privileges/leak information     (XSA-226, bsc#1051787).

  - CVE-2017-12137: Incorrectly-aligned updates to     pagetables allowed for privilege escalation (XSA-227,     bsc#1051788).

  - CVE-2017-11334: The address_space_write_continue     function in exec.c allowed local guest OS privileged     users to cause a denial of service (out-of-bounds access     and guest instance crash) by leveraging use of     qemu_map_ram_ptr to access guest ram block area     (bsc#1048920).

  - CVE-2017-11434: The dhcp_decode function in     slirp/bootp.c allowed local guest OS users to cause a     denial of service (out-of-bounds read) via a crafted     DHCP options string (bsc#1049578).

  - CVE-2017-10806: Stack-based buffer overflow in     hw/usb/redirect.c allowed local guest OS users to cause     a denial of service via vectors related to logging debug     messages (bsc#1047675).

  - CVE-2017-10664: qemu-nbd did not ignore SIGPIPE, which     allowed remote attackers to cause a denial of service     (daemon crash) by disconnecting during a     server-to-client reply attempt (bsc#1046637).

  - CVE-2017-12855: Premature clearing of GTF_writing /     GTF_reading lead to potentially leaking sensitive     information (XSA-230, bsc#1052686).

  - CVE-2017-14316: Missing bound check in function     `alloc_heap_pages` for an internal array allowed     attackers using crafted hypercalls to execute arbitrary     code within Xen (XSA-231, bsc#1056278)

  - CVE-2017-14317: A race in cxenstored may have cause a     double-free allowind for DoS of the xenstored daemon     (XSA-233, bsc#1056281).

  - CVE-2017-14319: An error while handling grant mappings     allowed malicious or buggy x86 PV guest to escalate its     privileges or crash the hypervisor (XSA-234,     bsc#1056282).

The update package also includes non-security fixes. See advisory for details.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in denial of service, information leaks, privilege escalation or the execution of arbitrary code.

Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in denial of service, informations leaks or privilege escalation.

For Debian 8 'Jessie', these problems have been fixed in version 4.4.4lts2-0+deb8u1.

We recommend that you upgrade your xen packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
105848	Fedora 27 : xen (2017-333ea49a63)	Nessus	Fedora Local Security Checks	2018/1/15	2025/11/6	high
111992	OracleVM 3.4 : xen (OVMSA-2018-0248) (Bunker Buster) (Foreshadow) (Meltdown) (POODLE) (Spectre)	Nessus	OracleVM Local Security Checks	2018/8/20	2026/1/9	critical
140019	OracleVM 3.4 : xen (OVMSA-2020-0039) (Bunker Buster) (Foreshadow) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout) (Meltdown) (POODLE) (Spectre)	Nessus	OracleVM Local Security Checks	2020/8/28	2026/1/9	critical
103291	openSUSE Security Update : xen (openSUSE-2017-1071)	Nessus	SuSE Local Security Checks	2017/9/18	2025/11/20	high
103412	SUSE SLES12 Security Update : xen (SUSE-SU-2017:2541-1)	Nessus	SuSE Local Security Checks	2017/9/22	2025/11/20	high
103619	Fedora 25 : xen (2017-f7fd3fe7eb)	Nessus	Fedora Local Security Checks	2017/10/3	2025/11/19	high
104819	Debian DSA-4050-1 : xen - security update	Nessus	Debian Local Security Checks	2017/11/29	2025/11/13	critical
118215	Debian DLA-1549-1 : xen security update	Nessus	Debian Local Security Checks	2018/10/19	2024/7/30	critical

检测

插件搜索

high

critical

critical

high

high

high

critical

critical