Test ID:	1.3.6.1.4.1.25623.1.0.122180
Category:	Oracle Linux Local Security Checks
Title:	Oracle: Security Advisory (ELSA-2011-0496)
Summary:	The remote host is missing an update for the 'xen' package(s) announced via the ELSA-2011-0496 advisory.
Description:	Summary: The remote host is missing an update for the 'xen' package(s) announced via the ELSA-2011-0496 advisory. Vulnerability Insight: [3.0.3-120.el5_6.2] - Fix logic and integer overflow in xc_try_bzip2_decode() (rhbz 696938) - Fix logic and integer overflow in xc_try_lzma_decode() (rhbz 696938) - Fix integer and buffer overflows in xc_dom_probe_bzimage_kernel() (rhbz 696938) Affected Software/OS: 'xen' package(s) on Oracle Linux 5. Solution: Please install the updated package(s). CVSS Score: 6.9 CVSS Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-1583 RHSA-2011:0496 http://rhn.redhat.com/errata/RHSA-2011-0496.html [Xen-devel] 20110509 Re: Xen security advisory CVE-2011-1583 - pv kernel image validation http://lists.xensource.com/archives/html/xen-devel/2011-05/msg00491.html [Xen-devel] 20110509 Xen security advisory CVE-2011-1583 - pv kernel image validation http://lists.xensource.com/archives/html/xen-devel/2011-05/msg00483.html Common Vulnerability Exposure (CVE) ID: CVE-2011-3262 http://security.gentoo.org/glsa/glsa-201309-24.xml http://secunia.com/advisories/55082 XForce ISS Database: xen-xcdombzimageloader-dos(69381) https://exchange.xforce.ibmcloud.com/vulnerabilities/69381
Copyright	Copyright (C) 2015 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.