Multiple vulnerabilities have been discovered in Xen, the worst of which could result in remote code execution (guest sandbox escape).
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-emulation/xen | * | < 4.15.3 | >= 4.15.3 |
| app-emulation/xen-tools | * | < 4.15.3 | >= 4.15.3 |
Xen is a bare-metal hypervisor.
Multiple vulnerabilities have been discovered in Xen. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Xen users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/xen-4.15.3"
All Xen tools users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/xen-tools-4.15.3"
Multiple vulnerabilities have been found in Xen, the worst of which could result in privilege escalation.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-emulation/xen | * | < 4.13.2 | >= 4.13.2 |
| app-emulation/xen-tools | * | < 4.13.2 | >= 4.13.2 |
Xen is a bare-metal hypervisor.
Multiple vulnerabilities have been discovered in Xen. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Xen users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/xen-4.13.1-r5"
All Xen Tools users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/xen-tools-4.13.1-r5"
A buffer overflow in Xen might allow remote attacker(s) to execute arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-emulation/xen | * | < 4.13.1-r3 | >= 4.13.1-r3 |
| app-emulation/xen-tools | * | < 4.13.1-r3 | >= 4.13.1-r3 |
Xen is a bare-metal hypervisor.
An out-of-bounds read/write access issue was found in the USB emulator when using QEMU.
A remote attacker could possibly execute arbitrary code with the privileges of the process or cause a Denial of Service condition.
There is no known workaround at this time.
All Xen users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/xen-4.13.1-r3"
All Xen tools users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/xen-tools-4.13.1-r3"
Multiple vulnerabilities have been found in Xen, the worst of which could result in the arbitrary execution of code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-emulation/xen | * | < 4.12.3-r2 | >= 4.12.3-r2 |
| app-emulation/xen-tools | * | < 4.12.3-r2 | >= 4.12.3-r2 |
Xen is a bare-metal hypervisor.
Multiple vulnerabilities have been discovered in Xen. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Xen users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/xen-4.12.3-r2"
All Xen Tools users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/xen-tools-4.12.3-r2"
Multiple vulnerabilities have been found in Xen, the worst of which could allow privilege escalation.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-emulation/xen | * | < 4.12.2-r2 | >= 4.12.2-r2 |
| app-emulation/xen-tools | * | < 4.12.2-r1 | >= 4.12.2-r1 |
Xen is a bare-metal hypervisor.
Multiple vulnerabilities have been discovered in Xen. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All Xen users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/xen-4.12.2-r2"
All Xen Tools users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/xen-tools-4.12.2-r1"
Multiple vulnerabilities have been found in Xen, the worst of which could allow for privilege escalation.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-emulation/xen | * | < 4.12.0-r1 | >= 4.12.0-r1 |
| app-emulation/xen-tools | * | < 4.12.0-r1 | >= 4.12.0-r1 |
Xen is a bare-metal hypervisor.
Multiple vulnerabilities have been discovered in Xen. Please review the referenced CVE identifiers for details.
A local attacker could potentially gain privileges on the host system or cause a Denial of Service condition.
There is no known workaround at this time.
All Xen users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/xen-4.12.0-r1"
Multiple vulnerabilities have been found in Xen, the worst of which could result in privilege escalation.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-emulation/xen | * | < 4.10.3-r1 | >= 4.10.3-r1 |
| app-emulation/xen-pvgrub | * | < 4.10.3 | >= 4.10.3 |
| app-emulation/xen-tools | * | < 4.10.3-r2 | >= 4.10.3-r2 |
Xen is a bare-metal hypervisor.
Multiple vulnerabilities have been discovered in Xen. Please review the referenced XSA security advisories.
Please review the referenced XSA security advisories for details.
There is no known workaround at this time.
All Xen users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/xen-4.10.3-r2"
All Xen pvgrub users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/xen-pvgrub-4.10.3-r2"
All Xen tools users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/xen-tools-4.10.3-r2"
Multiple vulnerabilities have been found in Xen, the worst of which could cause a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-emulation/xen | * | < 4.10.1-r2 | >= 4.10.1-r2 |
| app-emulation/xen-tools | * | < 4.10.1-r2 | >= 4.10.1-r2 |
Xen is a bare-metal hypervisor.
Multiple vulnerabilities have been discovered in Xen. Please review the referenced CVE identifiers for details.
A local attacker could cause a Denial of Service condition or disclose sensitive information.
There is no known workaround at this time.
All Xen users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/xen-4.10.1-r2"
All Xen tools users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/xen-tools-4.10.1-r2"
Multiple vulnerabilities have been found in Xen, the worst of which could allow for privilege escalation.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-emulation/xen | * | < 4.9.1-r1 | >= 4.9.1-r1 |
| app-emulation/xen-tools | * | < 4.9.1-r1 | >= 4.9.1-r1 |
Xen is a bare-metal hypervisor.
Multiple vulnerabilities have been discovered in Xen. Please review the referenced CVE identifiers for details.
A local attacker could potentially execute arbitrary code with the privileges of the Xen (QEMU) process on the host, gain privileges on the host system, or cause a Denial of Service condition.
There is no known workaround at this time.
All Xen users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/xen-4.9.1-r1"
All Xen tools users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/xen-tools-4.9.1-r1"
Multiple vulnerabilities have been found in Xen, the worst of which may allow local attackers to escalate privileges.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-emulation/xen | * | < 4.7.3 | >= 4.7.3 |
| app-emulation/xen-pvgrub | * | < 4.7.3 | >= 4.7.3 |
| app-emulation/xen-tools | * | < 4.7.3 | >= 4.7.3 |
Xen is a bare-metal hypervisor.
Multiple vulnerabilities have been discovered in Xen. Please review the referenced CVE identifiers for details.
A local attacker could escalate privileges, cause a Denial of Service condition, obtain sensitive information, or have other unspecified impacts.
There is no known workaround at this time.
All Xen users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/xen-4.7.3"
All Xen pvgrub users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/xen-pvgrub-4.7.3"
All Xen Tools users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/xen-tools-4.7.3"
Multiple vulnerabilities have been found in Xen, the worst of which could allow for privilege escalation.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-emulation/xen | * | < 4.7.2-r1 | >= 4.7.2-r1 |
| app-emulation/xen-pvgrub | * | < 4.7.2 | >= 4.7.2 |
| app-emulation/xen-tools | * | < 4.7.2 | >= 4.7.2 |
Xen is a bare-metal hypervisor.
Multiple vulnerabilities have been discovered in Xen. Please review the CVE identifiers and Xen Security Advisory referenced below for details.
A local attacker could potentially execute arbitrary code with privileges of Xen (QEMU) process on the host, gain privileges on the host system, or cause a Denial of Service condition.
There is no known workaround at this time.
All Xen users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/xen-4.7.2-r1:0"
All Xen Tools users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/xen-tools-4.7.2:0"
All Xen pvgrub users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/xen-pvgrub-4.7.2:0"
A vulnerability in Xen's bundled QEMU version might allow privilege escalation.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-emulation/xen-tools | * | < 4.7.1-r8 | >= 4.7.1-r8 |
Xen is a bare-metal hypervisor.
In CIRRUS_BLTMODE_MEMSYSSRC mode the bitblit copy routine cirrus_bitblt_cputovideo fails to check wethehr the specified memory region is safe.
A local attacker could potentially execute arbitrary code with privileges of Xen (QEMU) process on the host, gain privileges on the host system, or cause a Denial of Service condition.
Running guests in Paravirtualization (PV) mode, or running guests in Hardware-assisted virtualizion (HVM) utilizing stub domains mitigate the issue.
Running HVM guests with the device model in a stubdomain will mitigate the issue.
Changing the video card emulation to stdvga (stdvga=1, vga=”stdvga”, in the xl domain configuration) will avoid the vulnerability.
All Xen Tools users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/xen-tools-4.7.1-r8"
Multiple vulnerabilities have been found in Xen, the worst of which could lead to the execution of arbitrary code on the host system.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-emulation/xen | * | < 4.7.1-r5 | >= 4.7.1-r5 |
| app-emulation/xen-tools | * | < 4.7.1-r6 | >= 4.7.1-r6 |
Xen is a bare-metal hypervisor.
Multiple vulnerabilities have been discovered in Xen. Please review the CVE identifiers and Xen Security Advisory referenced below for details.
A local attacker could potentially execute arbitrary code with privileges of Xen (QEMU) process on the host, gain privileges on the host system, cause a Denial of Service condition, or obtain sensitive information.
There is no known workaround at this time.
All Xen users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/xen-4.7.1-r5"
All Xen Tools users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/xen-tools-4.7.1-r6"
Multiple vulnerabilities have been found in Xen, the worst of which could lead to the execution of arbitrary code on the host system.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-emulation/xen | * | < 4.7.1-r4 | >= 4.7.1-r4 |
| app-emulation/xen-pvgrub | * | < 4.7.1-r1 | >= 4.7.1-r1 |
| app-emulation/xen-tools | * | < 4.7.1-r4 | >= 4.7.1-r4 |
Xen is a bare-metal hypervisor.
Multiple vulnerabilities have been discovered in Xen. Please review the CVE identifiers referenced below for details.
A local attacker could possibly execute arbitrary code with the privileges of the process, could gain privileges on the host system, cause a Denial of Service condition, or obtain sensitive information.
There is no known workaround at this time.
All Xen users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/xen-4.7.1-r4"
All Xen Tools users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/xen-tools-4.7.1-r4"
All Xen PvGrub users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/xen-pvgrub-4.7.1-r1"
Multiple vulnerabilities have been found in Xen, the worst of which allows gaining of privileges on the host system.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-emulation/xen | * | < 4.6.3-r3 | >= 4.6.3-r3 |
| app-emulation/xen-tools | * | < 4.6.3-r2 | >= 4.6.3-r2 |
Xen is a bare-metal hypervisor.
Multiple vulnerabilities have been discovered in Xen. Please review the CVE identifiers referenced below for details.
A malicious guest administrator could escalate their privileges on the host system or cause a Denial of Service. Additionally, a malicious unprivileged guest user may be able to obtain or corrupt sensitive information (including cryptographic material) in other programs in the same guest.
There is no known workaround at this time.
All Xen users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/xen-4.6.3-r3"
All Xen tools users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/xen-tools-4.6.3-r2
Multiple vulnerabilities have been found in Xen, the worst of which cause a Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-emulation/pvgrub | * | — | >= 4.6.0, >= 4.5.2 (revision) |
| app-emulation/xen | * | < 4.6.0-r9 | >= 4.6.0-r9, >= 4.5.2-r5 (revision) |
| app-emulation/xen-pvgrub | * | < 4.6.0 | — |
| app-emulation/xen-tools | * | < 4.6.0-r9 | >= 4.6.0-r9, >= 4.5.2-r5 (revision) |
Xen is a bare-metal hypervisor.
Multiple vulnerabilities have been discovered in Xen. Please review the CVE identifiers referenced below for details.
A local attacker could possibly cause a Denial of Service condition or obtain sensitive information.
There is no known workaround at this time.
All Xen 4.5 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/xen-4.5.2-r5"
All Xen 4.6 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/xen-4.6.0-r9"
All Xen tools 4.5 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/xen-tools-4.5.2-r5"
All Xen tools 4.6 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/xen-tools-4.6.0-r9"
All Xen pvgrub users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/xen-pvgrub-4.6.0"
Multiple vulnerabilities have been found in Xen, allowing attackers on a Xen Virtual Machine to execute arbitrary code, cause Denial of Service, or gain access to data on the host.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-emulation/xen | * | < 4.2.2-r1 | >= 4.2.2-r1 |
| app-emulation/xen-pvgrub | * | < 4.2.2-r1 | >= 4.2.2-r1 |
| app-emulation/xen-tools | * | < 4.2.2-r3 | >= 4.2.2-r3 |
Xen is a bare-metal hypervisor.
Multiple vulnerabilities have been discovered in Xen. Please review the CVE identifiers referenced below for details.
Guest domains could possibly gain privileges, execute arbitrary code, or cause a Denial of Service on the host domain (Dom0). Additionally, guest domains could gain information about other virtual machines running on the same host or read arbitrary files on the host.
The CVEs listed below do not currently have fixes, but only apply to Xen setups which have “tmem” specified on the hypervisor command line. TMEM is not currently supported for use in production systems, and administrators using tmem should disable it. Relevant CVEs: * CVE-2012-2497 * CVE-2012-6030 * CVE-2012-6031 * CVE-2012-6032 * CVE-2012-6033 * CVE-2012-6034 * CVE-2012-6035 * CVE-2012-6036
All Xen users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/xen-4.2.2-r1"
All Xen-tools users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/xen-tools-4.2.2-r3"
All Xen-pvgrub users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/xen-pvgrub-4.2.2-r1"