ID de Prueba:	1.3.6.1.4.1.25623.1.0.121038
Categoría:	Gentoo Local Security Checks
Título:	Gentoo Security Advisory GLSA 201309-24
Resumen:	Gentoo Linux Local Security Checks GLSA 201309-24
Descripción:	Summary: Gentoo Linux Local Security Checks GLSA 201309-24 Vulnerability Insight: Multiple vulnerabilities have been discovered in Xen. Please review the CVE identifiers referenced below for details. Solution: Update the affected packages to the latest available version. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2012-2497 Common Vulnerability Exposure (CVE) ID: CVE-2012-6030 BugTraq ID: 55410 http://www.securityfocus.com/bid/55410 http://security.gentoo.org/glsa/glsa-201309-24.xml https://security.gentoo.org/glsa/201604-03 http://lists.xen.org/archives/html/xen-announce/2012-09/msg00006.html http://www.openwall.com/lists/oss-security/2012/09/05/8 http://osvdb.org/85199 http://www.securitytracker.com/id?1027482 http://secunia.com/advisories/50472 http://secunia.com/advisories/55082 XForce ISS Database: xen-tmem-priv-esc(78268) https://exchange.xforce.ibmcloud.com/vulnerabilities/78268 Common Vulnerability Exposure (CVE) ID: CVE-2012-6031 Common Vulnerability Exposure (CVE) ID: CVE-2012-6032 Common Vulnerability Exposure (CVE) ID: CVE-2012-6033 Common Vulnerability Exposure (CVE) ID: CVE-2012-6034 Common Vulnerability Exposure (CVE) ID: CVE-2012-6035 Common Vulnerability Exposure (CVE) ID: CVE-2012-6036 XForce ISS Database: xen-memcsavegetnextpage-code-exec(80326) https://exchange.xforce.ibmcloud.com/vulnerabilities/80326 Common Vulnerability Exposure (CVE) ID: CVE-2011-2901 55082 GLSA-201309-24 RHSA-2011:1212 http://rhn.redhat.com/errata/RHSA-2011-1212.html [oss-security] 20110902 Xen Security Advisory 4 (CVE-2011-2901) - Xen 3.3 vaddr validation http://www.openwall.com/lists/oss-security/2011/09/02/2 https://bugzilla.redhat.com/show_bug.cgi?id=728042 Common Vulnerability Exposure (CVE) ID: CVE-2011-3262 http://lists.xensource.com/archives/html/xen-devel/2011-05/msg00491.html http://lists.xensource.com/archives/html/xen-devel/2011-05/msg00483.html XForce ISS Database: xen-xcdombzimageloader-dos(69381) https://exchange.xforce.ibmcloud.com/vulnerabilities/69381 Common Vulnerability Exposure (CVE) ID: CVE-2012-0217 Cert/CC Advisory: TA12-164A http://www.us-cert.gov/cas/techalerts/TA12-164A.html CERT/CC vulnerability note: VU#649219 http://www.kb.cert.org/vuls/id/649219 Debian Security Information: DSA-2501 (Google Search) http://www.debian.org/security/2012/dsa-2501 Debian Security Information: DSA-2508 (Google Search) http://www.debian.org/security/2012/dsa-2508 https://www.exploit-db.com/exploits/28718/ https://www.exploit-db.com/exploits/46508/ FreeBSD Security Advisory: FreeBSD-SA-12:04 http://security.freebsd.org/advisories/FreeBSD-SA-12:04.sysret.asc http://www.mandriva.com/security/advisories?name=MDVSA-2013:150 http://lists.xen.org/archives/html/xen-announce/2012-06/msg00001.html http://lists.xen.org/archives/html/xen-devel/2012-06/msg01072.html Microsoft Security Bulletin: MS12-042 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-042 NETBSD Security Advisory: NetBSD-SA2012-003 http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2012-003.txt.asc https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15596 Common Vulnerability Exposure (CVE) ID: CVE-2012-0218 http://lists.xen.org/archives/html/xen-announce/2012-06/msg00003.html Common Vulnerability Exposure (CVE) ID: CVE-2012-2934 BugTraq ID: 53961 http://www.securityfocus.com/bid/53961 http://support.amd.com/us/Processor_TechDocs/25759.pdf http://lists.xen.org/archives/html/xen-announce/2012-06/msg00002.html http://secunia.com/advisories/51413 SuSE Security Announcement: openSUSE-SU-2012:1572 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html SuSE Security Announcement: openSUSE-SU-2012:1573 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00018.html Common Vulnerability Exposure (CVE) ID: CVE-2012-3432 54691 http://www.securityfocus.com/bid/54691 DSA-2531 http://www.debian.org/security/2012/dsa-2531 SUSE-SU-2012:1043 http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00024.html SUSE-SU-2012:1044 http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00025.html [Xen-devel] 20120727 Xen Security Advisory 10 (CVE-2012-3432) - HVM user mode MMIO emul DoS http://lists.xen.org/archives/html/xen-devel/2012-07/msg01649.html openSUSE-SU-2012:1172 http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00017.html openSUSE-SU-2012:1174 http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00018.html Common Vulnerability Exposure (CVE) ID: CVE-2012-3433 54942 http://www.securityfocus.com/bid/54942 [Xen-devel] 20120809 Xen Security Advisory 11 (CVE-2012-3433) - HVM destroy p2m host DoS http://lists.xen.org/archives/html/xen-devel/2012-08/msg00855.html [oss-security] 20120809 Xen Security Advisory 11 (CVE-2012-3433) - HVM destroy p2m host DoS http://www.openwall.com/lists/oss-security/2012/08/09/3 Common Vulnerability Exposure (CVE) ID: CVE-2012-3494 1027479 http://www.securitytracker.com/id?1027479 50472 50530 http://secunia.com/advisories/50530 51413 55400 http://www.securityfocus.com/bid/55400 85197 http://osvdb.org/85197 DSA-2544 http://www.debian.org/security/2012/dsa-2544 GLSA-201604-03 SUSE-SU-2012:1129 http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00001.html SUSE-SU-2012:1132 http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00003.html SUSE-SU-2012:1133 http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00004.html SUSE-SU-2012:1135 http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00005.html SUSE-SU-2012:1162 http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00012.html [Xen-announce] 20120905 Xen Security Advisory 12 (CVE-2012-3494) - hypercall set_debugreg vulnerability http://lists.xen.org/archives/html/xen-announce/2012-09/msg00000.html [oss-security] 20120905 Xen Security Advisory 12 (CVE-2012-3494) - hypercall set_debugreg vulnerability http://www.openwall.com/lists/oss-security/2012/09/05/5 http://support.citrix.com/article/CTX134708 http://wiki.xen.org/wiki/Security_Announcements#XSA-12_hypercall_set_debugreg_vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=851139 openSUSE-SU-2012:1572 openSUSE-SU-2012:1573 xen-setdebugreg-dos(78265) https://exchange.xforce.ibmcloud.com/vulnerabilities/78265 Common Vulnerability Exposure (CVE) ID: CVE-2012-3495 1027480 http://www.securitytracker.com/id?1027480 55406 http://www.securityfocus.com/bid/55406 [Xen-announce] 20120905 Xen Security Advisory 13 (CVE-2012-3495) - hypercall physdev_get_free_pirq vulnerability http://lists.xen.org/archives/html/xen-announce/2012-09/msg00001.html [oss-security] 20120905 Xen Security Advisory 13 (CVE-2012-3495) - hypercall physdev_get_free_pirq vulnerability http://www.openwall.com/lists/oss-security/2012/09/05/6 http://wiki.xen.org/wiki/Security_Announcements#XSA-13_hypercall_physdev_get_free_pirq_vulnerability http://xenbits.xen.org/hg/xen-4.1-testing.hg/rev/6779ddca8593 Common Vulnerability Exposure (CVE) ID: CVE-2012-3496 1027481 http://securitytracker.com/id?1027481 55412 http://www.securityfocus.com/bid/55412 85200 http://www.osvdb.org/85200 [Xen-announce] 20120905 Xen Security Advisory 14 (CVE-2012-3496) - XENMEM_populate_physmap DoS vulnerability http://lists.xen.org/archives/html/xen-announce/2012-09/msg00002.html [oss-security] 20120905 Xen Security Advisory 14 (CVE-2012-3496) - XENMEM_populate_physmap DoS vulnerability http://www.openwall.com/lists/oss-security/2012/09/05/7 http://wiki.xen.org/wiki/Security_Announcements#XSA-14_XENMEM_populate_physmap_DoS_vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=854590 xen-xenmempopulatephysmap-dos(78267) https://exchange.xforce.ibmcloud.com/vulnerabilities/78267 Common Vulnerability Exposure (CVE) ID: CVE-2012-3497 1027482 51324 http://secunia.com/advisories/51324 51352 http://secunia.com/advisories/51352 55410 85199 SUSE-SU-2012:1486 http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html SUSE-SU-2012:1487 http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00009.html SUSE-SU-2014:0446 http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html [Xen-announce] 20120905 Xen Security Advisory 15 (CVE-2012-3497) - multiple TMEM hypercall vulnerabilities [oss-security] 20120905 Xen Security Advisory 15 (CVE-2012-3497) - multiple TMEM hypercall vulnerabilities http://wiki.xen.org/wiki/Security_Announcements#XSA-15_multiple_TMEM_hypercall_vulnerabilities xen-tmem-priv-esc(78268) Common Vulnerability Exposure (CVE) ID: CVE-2012-3498 1027483 http://securitytracker.com/id?1027483 55414 http://www.securityfocus.com/bid/55414 85198 http://osvdb.org/85198 [Xen-announce] 20120905 Xen Security Advisory 16 (CVE-2012-3498) - PHYSDEVOP_map_pirq index vulnerability http://lists.xen.org/archives/html/xen-announce/2012-09/msg00005.html [oss-security] 20120905 Xen Security Advisory 16 (CVE-2012-3498) - PHYSDEVOP_map_pirq index vulnerability http://www.openwall.com/lists/oss-security/2012/09/05/9 http://wiki.xen.org/wiki/Security_Announcements#XSA-16_PHYSDEVOP_map_pirq_index_vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=851193 xen-physdevopmappirq-dos(78269) https://exchange.xforce.ibmcloud.com/vulnerabilities/78269 Common Vulnerability Exposure (CVE) ID: CVE-2012-3515 50528 http://secunia.com/advisories/50528 50632 http://secunia.com/advisories/50632 50689 http://secunia.com/advisories/50689 50860 http://secunia.com/advisories/50860 50913 http://secunia.com/advisories/50913 55413 http://www.securityfocus.com/bid/55413 DSA-2543 http://www.debian.org/security/2012/dsa-2543 DSA-2545 http://www.debian.org/security/2012/dsa-2545 RHSA-2012:1233 http://rhn.redhat.com/errata/RHSA-2012-1233.html RHSA-2012:1234 http://rhn.redhat.com/errata/RHSA-2012-1234.html RHSA-2012:1235 http://rhn.redhat.com/errata/RHSA-2012-1235.html RHSA-2012:1236 http://rhn.redhat.com/errata/RHSA-2012-1236.html RHSA-2012:1262 http://rhn.redhat.com/errata/RHSA-2012-1262.html RHSA-2012:1325 http://rhn.redhat.com/errata/RHSA-2012-1325.html SUSE-SU-2012:1202 http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00024.html SUSE-SU-2012:1203 http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00026.html SUSE-SU-2012:1205 http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00027.html SUSE-SU-2012:1320 http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00002.html USN-1590-1 http://www.ubuntu.com/usn/USN-1590-1 [Xen-announce] 20120905 Xen Security Advisory 17 (CVE-2012-3515) - Qemu VT100 emulation vulnerability http://lists.xen.org/archives/html/xen-announce/2012-09/msg00003.html [oss-security] 20120905 Xen Security Advisory 17 (CVE-2012-3515) - Qemu VT100 emulation vulnerability http://www.openwall.com/lists/oss-security/2012/09/05/10 http://git.qemu.org/?p=qemu-stable-0.15.git%3Ba=log http://wiki.xen.org/wiki/Security_Announcements#XSA-17_Qemu_VT100_emulation_vulnerability openSUSE-SU-2012:1153 http://lists.opensuse.org/opensuse-updates/2012-09/msg00051.html openSUSE-SU-2012:1170 http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00016.html Common Vulnerability Exposure (CVE) ID: CVE-2012-4411 50493 http://secunia.com/advisories/50493 55442 http://www.securityfocus.com/bid/55442 [Xen-announce] 20120906 Xen Security Advisory 19 - guest administrator can access qemu monitor console http://lists.xen.org/archives/html/xen-announce/2012-09/msg00007.html [Xen-announce] 20120907 Xen Security Advisory 19 (CVE-2012-4411) - guest administrator can access qemu monitor console http://lists.xen.org/archives/html/xen-announce/2012-09/msg00008.html [oss-security] 20120906 Re: Xen Security Advisory 19 - guest administrator can access qemu monitor console http://www.openwall.com/lists/oss-security/2012/09/06/7 [oss-security] 20120906 Xen Security Advisory 19 - guest administrator can access qemu monitor console http://www.openwall.com/lists/oss-security/2012/09/06/2 [oss-security] 20120907 Xen Security Advisory 19 (CVE-2012-4411) - guest administrator can access qemu monitor console http://www.openwall.com/lists/oss-security/2012/09/07/5 Common Vulnerability Exposure (CVE) ID: CVE-2012-4535 1027759 http://www.securitytracker.com/id?1027759 51200 http://secunia.com/advisories/51200 51468 http://secunia.com/advisories/51468 56498 http://www.securityfocus.com/bid/56498 87298 http://osvdb.org/87298 DSA-2582 http://www.debian.org/security/2012/dsa-2582 RHSA-2012:1540 http://rhn.redhat.com/errata/RHSA-2012-1540.html SUSE-SU-2012:1615 http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html SUSE-SU-2014:0470 http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html [Xen-announce] 20121113 Xen Security Advisory 20 (CVE-2012-4535) - Timer overflow DoS vulnerability http://lists.xen.org/archives/html/xen-announce/2012-11/msg00001.html [oss-security] 20121113 Xen Security Advisory 20 (CVE-2012-4535) - Timer overflow DoS vulnerability http://www.openwall.com/lists/oss-security/2012/11/13/1 xen-vcpu-dos(80022) https://exchange.xforce.ibmcloud.com/vulnerabilities/80022 Common Vulnerability Exposure (CVE) ID: CVE-2012-4536 1027760 http://www.securitytracker.com/id?1027760 87297 http://osvdb.org/87297 [Xen-announce] 20121113 Xen Security Advisory 21 (CVE-2012-4536) - pirq range check DoS vulnerability http://lists.xen.org/archives/html/xen-announce/2012-11/msg00003.html [oss-security] 20121113 Xen Security Advisory 21 (CVE-2012-4536) - pirq range check DoS vulnerability http://www.openwall.com/lists/oss-security/2012/11/13/2 xen-domainpirqtoemuirq-dos(80023) https://exchange.xforce.ibmcloud.com/vulnerabilities/80023 Common Vulnerability Exposure (CVE) ID: CVE-2012-4537 1027761 http://www.securitytracker.com/id?1027761 87307 http://osvdb.org/87307 [Xen-announce] 20121113 Xen Security Advisory 22 (CVE-2012-4537) - Memory mapping failure DoS vulnerability http://lists.xen.org/archives/html/xen-announce/2012-11/msg00005.html [oss-security] 20121113 Xen Security Advisory 22 (CVE-2012-4537) - Memory mapping failure DoS vulnerability http://www.openwall.com/lists/oss-security/2012/11/13/6 xen-setp2mentry-dos(80024) https://exchange.xforce.ibmcloud.com/vulnerabilities/80024 Common Vulnerability Exposure (CVE) ID: CVE-2012-4538 1027762 http://www.securitytracker.com/id?1027762 87306 http://osvdb.org/87306 [Xen-announce] 20121113 Xen Security Advisory 23 (CVE-2012-4538) - Unhooking empty PAE entries DoS vulnerability http://lists.xen.org/archives/html/xen-announce/2012-11/msg00004.html [oss-security] 20121113 Xen Security Advisory 23 (CVE-2012-4538) - Unhooking empty PAE entries DoS vulnerability http://www.openwall.com/lists/oss-security/2012/11/13/3 xen-hvmop-dos(80025) https://exchange.xforce.ibmcloud.com/vulnerabilities/80025 Common Vulnerability Exposure (CVE) ID: CVE-2012-4539 1027763 http://www.securitytracker.com/id?1027763 87305 http://www.osvdb.org/87305 [Xen-announce] 20121113 Xen Security Advisory 24 (CVE-2012-4539) - Grant table hypercall infinite loop DoS vulnerability http://lists.xen.org/archives/html/xen-announce/2012-11/msg00002.html [oss-security] 20121113 Xen Security Advisory 24 (CVE-2012-4539) - Grant table hypercall infinite loop DoS vulnerability http://www.openwall.com/lists/oss-security/2012/11/13/4 openSUSE-SU-2012:1685 http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00018.html xen-gnttabopgetstatus-dos(80026) https://exchange.xforce.ibmcloud.com/vulnerabilities/80026 Common Vulnerability Exposure (CVE) ID: CVE-2012-5510 51397 http://secunia.com/advisories/51397 51486 http://secunia.com/advisories/51486 51487 http://secunia.com/advisories/51487 56794 http://www.securityfocus.com/bid/56794 88128 http://www.osvdb.org/88128 [oss-security] 20121203 Xen Security Advisory 26 (CVE-2012-5510) - Grant table version switch list corruption vulnerability http://www.openwall.com/lists/oss-security/2012/12/03/6 http://support.citrix.com/article/CTX135777 openSUSE-SU-2012:1687 http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00019.html openSUSE-SU-2013:0133 http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00011.html openSUSE-SU-2013:0636 http://lists.opensuse.org/opensuse-updates/2013-04/msg00051.html openSUSE-SU-2013:0637 http://lists.opensuse.org/opensuse-updates/2013-04/msg00052.html xen-grant-table-dos(80478) https://exchange.xforce.ibmcloud.com/vulnerabilities/80478 Common Vulnerability Exposure (CVE) ID: CVE-2012-5511 56796 http://www.securityfocus.com/bid/56796 88129 http://www.osvdb.org/88129 DSA-2636 http://www.debian.org/security/2013/dsa-2636 [oss-security] 20121203 Xen Security Advisory 27 (CVE-2012-5511) - several HVM operations do not validate the range of their inputs http://www.openwall.com/lists/oss-security/2012/12/03/10 xen-hvm-dos(80484) https://exchange.xforce.ibmcloud.com/vulnerabilities/80484 Common Vulnerability Exposure (CVE) ID: CVE-2012-5512 56799 http://www.securityfocus.com/bid/56799 88132 http://www.osvdb.org/88132 [oss-security] 20121203 Xen Security Advisory 28 (CVE-2012-5512) - HVMOP_get_mem_access crash / HVMOP_set_mem_access information leak http://www.openwall.com/lists/oss-security/2012/12/03/7 xen-hvmopsetmemaccess-dos(80481) https://exchange.xforce.ibmcloud.com/vulnerabilities/80481 Common Vulnerability Exposure (CVE) ID: CVE-2012-5513 51495 http://secunia.com/advisories/51495 56797 http://www.securityfocus.com/bid/56797 88131 http://www.osvdb.org/88131 SUSE-SU-2012:1606 http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00000.html [oss-security] 20121203 Xen Security Advisory 29 (CVE-2012-5513) - XENMEM_exchange may overwrite hypervisor memory http://www.openwall.com/lists/oss-security/2012/12/03/11 xen-xenmemexchange-priv-esc(80482) https://exchange.xforce.ibmcloud.com/vulnerabilities/80482 Common Vulnerability Exposure (CVE) ID: CVE-2012-5514 56803 http://www.securityfocus.com/bid/56803 88130 http://www.osvdb.org/88130 [oss-security] 20121203 Xen Security Advisory 30 (CVE-2012-5514) - Broken error handling in guest_physmap_mark_populate_on_demand() http://www.openwall.com/lists/oss-security/2012/12/03/12 xen-guestphysmapmark-dos(80483) https://exchange.xforce.ibmcloud.com/vulnerabilities/80483 Common Vulnerability Exposure (CVE) ID: CVE-2012-5515 56798 http://www.securityfocus.com/bid/56798 88127 http://www.osvdb.org/88127 [Xen-announce] 20121203 Xen Security Advisory 31 (CVE-2012-5515) - Several memory hypercall operations allow invalid extent order values http://lists.xen.org/archives/html/xen-announce/2012-12/msg00001.html [oss-security] 20121203 Xen Security Advisory 31 (CVE-2012-5515) - Several memory hypercall operations allow invalid extent order values http://www.openwall.com/lists/oss-security/2012/12/03/9 xen-extentorder-dos(80479) https://exchange.xforce.ibmcloud.com/vulnerabilities/80479 Common Vulnerability Exposure (CVE) ID: CVE-2012-5525 56805 http://www.securityfocus.com/bid/56805 88133 http://www.osvdb.org/88133 xen-getpagefromgfn-dos(80480) https://exchange.xforce.ibmcloud.com/vulnerabilities/80480 Common Vulnerability Exposure (CVE) ID: CVE-2012-5634 [oss-security] 20130109 Xen Security Advisory 33 (CVE-2012-5634) - VT-d interrupt remapping source validation flaw http://www.openwall.com/lists/oss-security/2013/01/09/5 openSUSE-SU-2013:0912 http://lists.opensuse.org/opensuse-updates/2013-06/msg00049.html Common Vulnerability Exposure (CVE) ID: CVE-2012-6075 57420 http://www.securityfocus.com/bid/57420 DSA-2607 http://www.debian.org/security/2013/dsa-2607 DSA-2608 http://www.debian.org/security/2013/dsa-2608 DSA-2619 http://www.debian.org/security/2013/dsa-2619 FEDORA-2013-0934 http://lists.fedoraproject.org/pipermail/package-announce/2013-January/097705.html FEDORA-2013-0965 http://lists.fedoraproject.org/pipermail/package-announce/2013-January/097575.html FEDORA-2013-0971 http://lists.fedoraproject.org/pipermail/package-announce/2013-January/097541.html RHSA-2013:0599 http://rhn.redhat.com/errata/RHSA-2013-0599.html RHSA-2013:0608 http://rhn.redhat.com/errata/RHSA-2013-0608.html RHSA-2013:0609 http://rhn.redhat.com/errata/RHSA-2013-0609.html RHSA-2013:0610 http://rhn.redhat.com/errata/RHSA-2013-0610.html RHSA-2013:0639 http://rhn.redhat.com/errata/RHSA-2013-0639.html USN-1692-1 http://www.ubuntu.com/usn/USN-1692-1 [Qemu-devel] 20121205 [PATCH] e1000: Discard oversized packets based on SBP|LPE http://lists.nongnu.org/archive/html/qemu-devel/2012-12/msg00533.html [oss-security] 20121229 Re: CVE request: qemu e1000 emulated device gues-side buffer overflow http://www.openwall.com/lists/oss-security/2012/12/30/1 http://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=b0d9ffcd0251161c7c92f94804dcf599dfa3edeb https://bugzilla.redhat.com/show_bug.cgi?id=889301 Common Vulnerability Exposure (CVE) ID: CVE-2012-6333 BugTraq ID: 56796 SuSE Security Announcement: SUSE-SU-2012:1615 (Google Search) SuSE Security Announcement: SUSE-SU-2014:0446 (Google Search) XForce ISS Database: xen-hvm-dos(80484) Common Vulnerability Exposure (CVE) ID: CVE-2013-0151 [oss-security] 20130122 Xen Security Advisory 34 (CVE-2013-0151) - nested virtualization on 32-bit exposes host crash http://openwall.com/lists/oss-security/2013/01/22/10 http://xenbits.xen.org/gitweb/?p=xen.git%3Ba=commit%3Bh=d60d7082289a74e44b3dc8f67df46c3404ca08bf Common Vulnerability Exposure (CVE) ID: CVE-2013-0152 1028032 http://www.securitytracker.com/id/1028032 [oss-security] 20130123 Xen Security Advisory 35 (CVE-2013-0152) - Nested HVM exposes host to being driven out of memory by guest http://www.openwall.com/lists/oss-security/2013/01/23/8 Common Vulnerability Exposure (CVE) ID: CVE-2013-0153 51881 http://secunia.com/advisories/51881 57745 http://www.securityfocus.com/bid/57745 89867 http://osvdb.org/89867 RHSA-2013:0847 http://rhn.redhat.com/errata/RHSA-2013-0847.html [oss-security] 20130205 Xen Security Advisory 36 (CVE-2013-0153) - interrupt remap entries shared and old ones not cleared on AMD IOMMUs http://www.openwall.com/lists/oss-security/2013/02/05/7 xen-amdiommu-dos(81831) https://exchange.xforce.ibmcloud.com/vulnerabilities/81831 Common Vulnerability Exposure (CVE) ID: CVE-2013-0154 1027937 http://www.securitytracker.com/id?1027937 57159 http://www.securityfocus.com/bid/57159 88913 http://osvdb.org/88913 [oss-security] 20130104 Xen Security Advisory 37 (CVE-2013-0154) - Hypervisor crash due to incorrect ASSERT (debug build only) http://www.openwall.com/lists/oss-security/2013/01/04/2 http://seclists.org/oss-sec/2013/q1/att-17/xsa37-4_2.patch xen-hypercall-dos(80977) https://exchange.xforce.ibmcloud.com/vulnerabilities/80977 Common Vulnerability Exposure (CVE) ID: CVE-2013-0215 [oss-security] 20130205 Xen Security Advisory 38 (CVE-2013-0215) - oxenstored incorrect handling of certain Xenbus ring states http://openwall.com/lists/oss-security/2013/02/05/10 http://xenbits.xen.org/gitweb/?p=xen.git%3Ba=commit%3Bh=40f9c5e0a6d15b4ca1f6d4ed3a46f0871520eab5 http://xenbits.xen.org/gitweb/?p=xen.git%3Ba=commit%3Bh=61401264eb00fae4ee4efc8e9a5067449283207b Common Vulnerability Exposure (CVE) ID: CVE-2013-1432 Debian Security Information: DSA-3006 (Google Search) http://www.debian.org/security/2014/dsa-3006 http://www.openwall.com/lists/oss-security/2013/06/26/5 Common Vulnerability Exposure (CVE) ID: CVE-2013-1917 1028455 http://www.securitytracker.com/id/1028455 DSA-2662 http://www.debian.org/security/2012/dsa-2662 FEDORA-2013-6723 http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104537.html SUSE-SU-2014:0411 http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00015.html [oss-security] 20130418 Xen Security Advisory 44 (CVE-2013-1917) - Xen PV DoS vulnerability with SYSENTER http://www.openwall.com/lists/oss-security/2013/04/18/8 Common Vulnerability Exposure (CVE) ID: CVE-2013-1918 53187 http://secunia.com/advisories/53187 59615 http://www.securityfocus.com/bid/59615 DSA-2666 http://www.debian.org/security/2013/dsa-2666 FEDORA-2013-7432 http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105533.html [oss-security] 20130502 Xen Security Advisory 45 (CVE-2013-1918) - Several long latency operations are not preemptible http://www.openwall.com/lists/oss-security/2013/05/02/8 Common Vulnerability Exposure (CVE) ID: CVE-2013-1919 59292 http://www.securityfocus.com/bid/59292 http://www.debian.org/security/2013/dsa-2662 FEDORA-2013-6641 http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104538.html [oss-security] 20130418 Xen Security Advisory 46 (CVE-2013-1919) - Several access permission issues with IRQs for unprivileged guests http://www.openwall.com/lists/oss-security/2013/04/18/6 Common Vulnerability Exposure (CVE) ID: CVE-2013-1920 1028388 http://www.securitytracker.com/id/1028388 52857 http://secunia.com/advisories/52857 58880 http://www.securityfocus.com/bid/58880 92050 http://osvdb.org/92050 [Xen-announce] 20130404 Xen Security Advisory 47 (CVE-2013-1920) - Potential use of freed memory in event channel operations http://lists.xen.org/archives/html/xen-announce/2013-04/msg00000.html [oss-security] 20130404 Xen Security Advisory 47 (CVE-2013-1920) - Potential use of freed memory in event channel operations http://www.openwall.com/lists/oss-security/2013/04/04/7 xen-cve20131920-code-exec(83226) https://exchange.xforce.ibmcloud.com/vulnerabilities/83226 Common Vulnerability Exposure (CVE) ID: CVE-2013-1922 1028426 http://www.securitytracker.com/id/1028426 FEDORA-2013-6185 http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103621.html FEDORA-2013-6211 http://lists.fedoraproject.org/pipermail/package-announce/2013-April/104036.html FEDORA-2013-6221 http://lists.fedoraproject.org/pipermail/package-announce/2013-April/103637.html [oss-security] 20130415 Xen Security Advisory 48 (CVE-2013-1922) - qemu-nbd format-guessing due to missing format specification http://www.openwall.com/lists/oss-security/2013/04/15/3 [oss-security] 20130416 CVE-2013-1922 -- qemu: qemu-nbd block format auto-detection vulnerability http://www.openwall.com/lists/oss-security/2013/04/16/2 Common Vulnerability Exposure (CVE) ID: CVE-2013-1952 53312 http://secunia.com/advisories/53312 59617 http://www.securityfocus.com/bid/59617 92984 http://osvdb.org/92984 [oss-security] 20130502 Xen Security Advisory 49 (CVE-2013-1952) - VT-d interrupt remapping source validation flaw for bridges http://www.openwall.com/lists/oss-security/2013/05/02/9 xen-cve20131952-dos(83968) https://exchange.xforce.ibmcloud.com/vulnerabilities/83968 Common Vulnerability Exposure (CVE) ID: CVE-2013-1964 1028459 http://www.securitytracker.com/id/1028459 59293 http://www.securityfocus.com/bid/59293 [oss-security] 20130418 Xen Security Advisory 50 (CVE-2013-1964) - grant table hypercall acquire/release imbalance http://www.openwall.com/lists/oss-security/2013/04/18/9 Common Vulnerability Exposure (CVE) ID: CVE-2013-2076 DSA-3006 [oss-security] 20130603 Xen Security Advisory 52 (CVE-2013-2076) - Information leak on XSAVE/XRSTOR capable AMD CPUs http://www.openwall.com/lists/oss-security/2013/06/03/1 Common Vulnerability Exposure (CVE) ID: CVE-2013-2077 [oss-security] 20130603 Xen Security Advisory 53 (CVE-2013-2077) - Hypervisor crash due to missing exception recovery on XRSTOR http://www.openwall.com/lists/oss-security/2013/06/03/2 Common Vulnerability Exposure (CVE) ID: CVE-2013-2078 1028613 http://www.securitytracker.com/id/1028613 [oss-security] 20130603 Xen Security Advisory 54 (CVE-2013-2078) - Hypervisor crash due to missing exception recovery on XSETBV http://www.openwall.com/lists/oss-security/2013/06/03/3 Common Vulnerability Exposure (CVE) ID: CVE-2013-2194 [oss-security] 20130620 Re: Xen Security Advisory 55 - Multiple vulnerabilities in libelf PV kernel handling http://www.openwall.com/lists/oss-security/2013/06/20/2 [oss-security] 20130620 Xen Security Advisory 55 (CVE-2013-2194,CVE-2013-2195,CVE-2013-2196) - Multiple vulnerabilities in libelf PV kernel handling http://www.openwall.com/lists/oss-security/2013/06/20/4 http://support.citrix.com/article/CTX138058 Common Vulnerability Exposure (CVE) ID: CVE-2013-2195 Common Vulnerability Exposure (CVE) ID: CVE-2013-2196 Common Vulnerability Exposure (CVE) ID: CVE-2013-2211 [oss-security] 20130625 Re: Xen Security Advisory 57 - libxl allows guest write access to sensitive console related xenstore keys http://www.openwall.com/lists/oss-security/2013/06/25/1 [oss-security] 20130626 Xen Security Advisory 57 (CVE-2013-2211) - libxl allows guest write access to sensitive console related xenstore keys http://www.openwall.com/lists/oss-security/2013/06/26/4
Copyright	Copyright (C) 2015 Eero Volotinen

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.