The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Xen 4.2.x and 4.3.x, when nested virtualization is disabled, does not properly check the emulation paths for (1) VMLAUNCH and (2) VMRESUME, which allows local HVM guest users to cause a denial of service (host crash) via unspecified vectors related to "guest VMX instruction execution."
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade xen | Jul 30, 2024 | Nov 18, 2013 |
| Gentoo Linux | — | Upgrade app-emulations/xen-tools.Upgrade app-emulations/xen-pvgrub.Upgrade app-emulations/xen. | Oct 30, 2017 | Nov 17, 2013 |
| Suse | — | Upgrade xenUpgrade sle-sdk-releaseUpgrade xen-kmp-desktopUpgrade xen-toolsUpgrade xen-kmp-paeUpgrade xen-libsUpgrade xen-develUpgrade xen-doc-htmlUpgrade xen-tools-domUUpgrade xen-doc-pdfUpgrade xen-kmp-defaultUpgrade xen-xend-toolsUpgrade xen-libs-32bit | Dec 23, 2013 | Nov 17, 2013 |
| Ubuntu | — | Upgrade xen | Nov 19, 2024 | Nov 18, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub