The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Xen 3.0.3 through 4.1.x (possibly 4.1.6.1), 4.2.x (possibly 4.2.3), and 4.3.x (possibly 4.3.1) does not properly prevent access to hypercalls, which allows local guest users to gain privileges via a crafted application running in ring 1 or 2.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-xen-develUpgrade kernel-docUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-PAE-develUpgrade kernel-xenUpgrade kernelUpgrade kernel-headersUpgrade kernel-PAE | Dec 1, 2016 | Dec 24, 2013 |
| Gentoo Linux | — | Upgrade app-emulations/xen-pvgrub.Upgrade app-emulations/xen-tools.Upgrade app-emulations/xen. | Oct 30, 2017 | Dec 24, 2013 |
| Oracle_linux | — | Upgrade kernel | Oct 16, 2024 | Dec 24, 2013 |
| Suse | — | Upgrade xen-kmp-kdumpUpgrade xen-doc-htmlUpgrade xen-doc-psUpgrade xen-kmp-debugUpgrade xen-kmp-defaultUpgrade xenUpgrade xen-tools-domUUpgrade xen-kmp-traceUpgrade xen-develUpgrade xen-kmp-vmipaeUpgrade xen-kmp-kdumppaeUpgrade xen-kmp-smpUpgrade xen-tools-ioemuUpgrade xen-kmp-vmiUpgrade xen-kmp-bigsmpUpgrade sle-sdk-releaseUpgrade xen-kmp-desktopUpgrade xen-libsUpgrade xen-xend-toolsUpgrade xen-kmp-paeUpgrade xen-doc-pdfUpgrade xen-toolsUpgrade xen-libs-32bit | Dec 23, 2013 | Dec 23, 2013 |
| Ubuntu | — | Upgrade xen | Nov 19, 2024 | Dec 24, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub