Red Hat Security AdvisoryRHSA-2007:0323
xen security update
Released 2007-10-02 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) xen-3.0.3-25.0.4.el5, xen-libs-3.0.3-25.0.4.el5, xen-libs-3.0.3-25.0.4.el5.i386 +1
- Red Hat Enterprise Linux Desktop (v. 5 client) xen-3.0.3-25.0.4.el5, xen-libs-3.0.3-25.0.4.el5, xen-libs-3.0.3-25.0.4.el5.i386
- Red Hat Enterprise Linux Desktop Multi OS (v. 5 client) xen-3.0.3-25.0.4.el5, xen-3.0.3-25.0.4.el5.i386, xen-devel-3.0.3-25.0.4.el5 +1
- Red Hat Enterprise Linux Virtualization (v. 5 server) xen-3.0.3-25.0.4.el5, xen-3.0.3-25.0.4.el5.i386, xen-3.0.3-25.0.4.el5.ia64 +3
Fixes 3 records
Priority LOW 32
Integer signedness error in the NE2000 emulator in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to trigger a heap-based buffer overflow via certain register values that bypass sanity checks,…
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00461 · Published 2007-10-30 · Fixed
Priority LOW 32
Multiple heap-based buffer overflows in the cirrus_invalidate_region function in the Cirrus VGA extension in QEMU 0.8.2, as used in Xen and possibly other products, might allow local users to execute arbitrary code via u…
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00489 · Published 2007-05-02 · Fixed CWE-787
Priority LOW 31
pygrub (tools/pygrub/src/GrubConf.py) in Xen 3.0.3, when booting a guest domain, allows local users with elevated privileges in the guest domain to execute arbitrary commands in domain 0 via a crafted grub.conf file whos…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.00633 · Published 2007-09-27 · Fixed CWE-20
THREATIST.IORead the docs