The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Xen 3.0.3 through 4.1.x (possibly 4.1.6.1), 4.2.x (possibly 4.2.3), and 4.3.x (possibly 4.3.1) does not properly prevent access to hypercalls, which allows local guest users to gain privileges via a crafted application running in ring 1 or 2.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-debugUpgrade kernel-docUpgrade kernel-xen-develUpgrade kernel-develUpgrade kernel-PAE-develUpgrade kernelUpgrade kernel-headersUpgrade kernel-xenUpgrade kernel-debug-develUpgrade kernel-PAE | Dec 1, 2016 | Dec 24, 2013 |
| Gentoo Linux | — | Upgrade app-emulations/xen.Upgrade app-emulations/xen-tools.Upgrade app-emulations/xen-pvgrub. | Oct 30, 2017 | Dec 24, 2013 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Dec 24, 2013 |
| Suse | — | Upgrade xen-tools-ioemuUpgrade xen-kmp-bigsmpUpgrade xen-kmp-smpUpgrade xen-doc-pdfUpgrade xen-kmp-desktopUpgrade xen-toolsUpgrade xen-libsUpgrade xen-xend-toolsUpgrade xen-kmp-kdumppaeUpgrade sle-sdk-releaseUpgrade xen-kmp-paeUpgrade xen-kmp-vmiUpgrade xen-libs-32bitUpgrade xen-kmp-vmipaeUpgrade xen-kmp-debugUpgrade xen-develUpgrade xen-kmp-traceUpgrade xen-doc-htmlUpgrade xen-doc-psUpgrade xen-kmp-kdumpUpgrade xen-tools-domUUpgrade xen-kmp-defaultUpgrade xen | Dec 23, 2013 | Dec 23, 2013 |
| Ubuntu | — | Upgrade xen | Nov 19, 2024 | Dec 24, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub