The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Xen 3.3.x through 4.5.x does not properly restrict write access to the host MSI message data field, which allows local x86 HVM guest administrators to cause a denial of service (host interrupt handling confusion) via vectors related to qemu and accessing spanning multiple fields.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemuUpgrade xen | Jul 30, 2024 | Jun 3, 2015 |
| Freebsd | — | Upgrade xen-tools | Dec 10, 2025 | Jul 11, 2015 |
| Gentoo Linux | — | Upgrade app-emulation/xen-tools.Upgrade app-emulation/xen-pvgrub.Upgrade app-emulation/xen.Upgrade app-emulation/pvgrub. | Oct 30, 2017 | Jun 3, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 2, 2015 |
| Suse | — | Upgrade xen-kmp-traceUpgrade xen-doc-htmlUpgrade xenUpgrade xen-tools-domUUpgrade xen-develUpgrade xen-libsUpgrade xen-toolsUpgrade xen-doc-pdfUpgrade xen-libs-32bitUpgrade xen-tools-xendomains-wait-diskUpgrade xen-kmp-defaultUpgrade xen-kmp-pae | Dec 18, 2015 | Jun 3, 2015 |
| Ubuntu | — | Upgrade qemu-system-armUpgrade qemu-kvmUpgrade qemu-system-aarch64Upgrade qemu-system-sparcUpgrade qemu-system-mipsUpgrade qemu-system-miscUpgrade qemu-system-ppcUpgrade qemu-systemUpgrade qemu-system-x86 | Nov 8, 2024 | Jun 3, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub