Test ID:	1.3.6.1.4.1.25623.1.1.10.2013.0197
Category:	Mageia Linux Local Security Checks
Title:	Mageia: Security Advisory (MGASA-2013-0197)
Summary:	The remote host is missing an update for the 'xen' package(s) announced via the MGASA-2013-0197 advisory.
Description:	Summary: The remote host is missing an update for the 'xen' package(s) announced via the MGASA-2013-0197 advisory. Vulnerability Insight: This update fixes the following security issues: XSA-52/CVE-2013-2076: Information leak on XSAVE/XRSTOR capable AMD CPUs XSA-53/CVE-2013-2077: Hypervisor crash due to missing exception recovery on XRSTOR XSA-54/CVE-2013-2078: Hypervisor crash due to missing exception recovery on XSETBV XSA-55/CVE-2013-2194: integer overflows XSA-55/CVE-2013-2195: pointer dereferences XSA-55/CVE-2013-2196: other problems XSA-56/CVE-2013-2072: Buffer overflow in xencontrol Python bindings affecting xend XSA-57/CVE-2013-2211: libxl allows guest write access to sensitive console related xenstore keys XSA-58/CVE-2013-1432: Page reference counting error due to XSA-45/CVE-2013-1918 fixes Affected Software/OS: 'xen' package(s) on Mageia 3. Solution: Please install the updated package(s). CVSS Score: 7.4 CVSS Vector: AV:A/AC:M/Au:S/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2013-1432 Debian Security Information: DSA-3006 (Google Search) http://www.debian.org/security/2014/dsa-3006 http://security.gentoo.org/glsa/glsa-201309-24.xml http://www.openwall.com/lists/oss-security/2013/06/26/5 http://secunia.com/advisories/55082 SuSE Security Announcement: SUSE-SU-2014:0446 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html Common Vulnerability Exposure (CVE) ID: CVE-2013-2072 59982 http://www.securityfocus.com/bid/59982 DSA-3041 http://www.debian.org/security/2014/dsa-3041 FEDORA-2013-8513 http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106778.html FEDORA-2013-8571 http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106718.html FEDORA-2013-8590 http://lists.fedoraproject.org/pipermail/package-announce/2013-May/106721.html SUSE-SU-2014:0446 [oss-security] 20130517 Xen Security Advisory 56 (CVE-2013-2072) - Buffer overflow in xencontrol Python bindings affecting xend http://www.openwall.com/lists/oss-security/2013/05/17/2 Common Vulnerability Exposure (CVE) ID: CVE-2013-2076 55082 DSA-3006 GLSA-201309-24 [oss-security] 20130603 Xen Security Advisory 52 (CVE-2013-2076) - Information leak on XSAVE/XRSTOR capable AMD CPUs http://www.openwall.com/lists/oss-security/2013/06/03/1 Common Vulnerability Exposure (CVE) ID: CVE-2013-2077 [oss-security] 20130603 Xen Security Advisory 53 (CVE-2013-2077) - Hypervisor crash due to missing exception recovery on XRSTOR http://www.openwall.com/lists/oss-security/2013/06/03/2 Common Vulnerability Exposure (CVE) ID: CVE-2013-2078 1028613 http://www.securitytracker.com/id/1028613 [oss-security] 20130603 Xen Security Advisory 54 (CVE-2013-2078) - Hypervisor crash due to missing exception recovery on XSETBV http://www.openwall.com/lists/oss-security/2013/06/03/3 Common Vulnerability Exposure (CVE) ID: CVE-2013-2194 SUSE-SU-2014:0411 http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00015.html SUSE-SU-2014:0470 http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html [oss-security] 20130620 Re: Xen Security Advisory 55 - Multiple vulnerabilities in libelf PV kernel handling http://www.openwall.com/lists/oss-security/2013/06/20/2 [oss-security] 20130620 Xen Security Advisory 55 (CVE-2013-2194,CVE-2013-2195,CVE-2013-2196) - Multiple vulnerabilities in libelf PV kernel handling http://www.openwall.com/lists/oss-security/2013/06/20/4 http://support.citrix.com/article/CTX138058 Common Vulnerability Exposure (CVE) ID: CVE-2013-2195 Common Vulnerability Exposure (CVE) ID: CVE-2013-2196 Common Vulnerability Exposure (CVE) ID: CVE-2013-2211 [oss-security] 20130625 Re: Xen Security Advisory 57 - libxl allows guest write access to sensitive console related xenstore keys http://www.openwall.com/lists/oss-security/2013/06/25/1 [oss-security] 20130626 Xen Security Advisory 57 (CVE-2013-2211) - libxl allows guest write access to sensitive console related xenstore keys http://www.openwall.com/lists/oss-security/2013/06/26/4
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.