Red Hat Security AdvisoryRHSA-2008:0892
xen security and bug fix update
Released 2008-10-01 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) xen-3.0.3-64.el5_2.3, xen-libs-3.0.3-64.el5_2.3, xen-libs-3.0.3-64.el5_2.3.i386 +1
- Red Hat Enterprise Linux Desktop (v. 5 client) xen-3.0.3-64.el5_2.3, xen-libs-3.0.3-64.el5_2.3, xen-libs-3.0.3-64.el5_2.3.i386
- Red Hat Enterprise Linux Desktop Multi OS (v. 5 client) xen-3.0.3-64.el5_2.3, xen-3.0.3-64.el5_2.3.i386, xen-devel-3.0.3-64.el5_2.3 +1
- Red Hat Enterprise Linux Virtualization (v. 5 server) xen-3.0.3-64.el5_2.3, xen-3.0.3-64.el5_2.3.i386, xen-3.0.3-64.el5_2.3.ia64 +3
Fixes 2 records
Priority LOW 12
QEMU 0.9.0 does not properly handle changes to removable media, which allows guest OS users to read arbitrary files on the host OS by using the diskformat: parameter in the -usbdevice option to modify the disk-image head…
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.0047 · Published 2008-08-08 · Fixed
Priority LOW 11
The backend for XenSource Xen Para Virtualized Frame Buffer (PVFB) in Xen ioemu does not properly restrict the frame buffer size, which allows attackers to cause a denial of service (crash) by mapping an arbitrary amount…
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00379 · Published 2008-06-23 · Fixed CWE-119
