Test ID:	1.3.6.1.4.1.25623.1.1.10.2024.0115
Category:	Mageia Linux Local Security Checks
Title:	Mageia: Security Advisory (MGASA-2024-0115)
Summary:	The remote host is missing an update for the 'xen' package(s) announced via the MGASA-2024-0115 advisory.
Description:	Summary: The remote host is missing an update for the 'xen' package(s) announced via the MGASA-2024-0115 advisory. Vulnerability Insight: x86: shadow stack vs exceptions from emulation stubs. (CVE-2023-46841) x86: Register File Data Sampling. (CVE-2023-28746) GhostRace: Speculative Race Conditions. (CVE-2024-2193) Affected Software/OS: 'xen' package(s) on Mageia 9. Solution: Please install the updated package(s). CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2023-28746 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EIUICU6CVJUIB6BPJ7P5QTPQR5VOBHFK/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZON4TLXG7TG4A2XZG563JMVTGQW4SF3A/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/H63LGAQXPEVJOES73U4XK65I6DASOAAG/ https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00898.html https://lists.debian.org/debian-lts-announce/2024/05/msg00003.html http://www.openwall.com/lists/oss-security/2024/03/12/13 Common Vulnerability Exposure (CVE) ID: CVE-2023-46841 https://xenbits.xenproject.org/xsa/advisory-451.html Common Vulnerability Exposure (CVE) ID: CVE-2024-2193 CERT/CC vulnerability note: VU#488902 https://www.kb.cert.org/vuls/id/488902 https://download.vusec.net/papers/ghostrace_sec24.pdf https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/patch/?id=944d5fe50f3f03daacfea16300e656a1691c4a23 https://ibm.github.io/system-security-research-updates/2024/03/12/ghostrace https://kb.cert.org/vuls/id/488902 https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7016.html https://www.vusec.net/projects/ghostrace/ https://xenbits.xen.org/xsa/advisory-453.html http://www.openwall.com/lists/oss-security/2024/03/12/14
Copyright	Copyright (C) 2024 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.