Red Hat Security AdvisoryRHSA-2011:0496
xen security update
Released 2011-05-09 · Red Hat rating Important · View on Red Hat →
Fixed in
- RHEL Virtualization (v. 5 server) xen-3.0.3-120.el5_6.2, xen-3.0.3-120.el5_6.2.i386, xen-3.0.3-120.el5_6.2.ia64 +3
- Red Hat Enterprise Linux (v. 5.6.z server) xen-3.0.3-120.el5_6.2, xen-libs-3.0.3-120.el5_6.2, xen-libs-3.0.3-120.el5_6.2.i386 +1
Fixes 2 records
Priority LOW 32
Multiple integer overflows in tools/libxc/xc_dom_bzimageloader.c in Xen 3.2, 3.3, 4.0, and 4.1 allow local users to cause a denial of service and possibly execute arbitrary code via a crafted paravirtualised guest kernel…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.00705 · Published 2011-08-12 · Fixed CWE-189
Priority LOW 11
tools/libxc/xc_dom_bzimageloader.c in Xen 3.2, 3.3, 4.0, and 4.1 allows local users to cause a denial of service (management software infinite loop and management domain resource consumption) via unspecified vectors rela…
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00334 · Published 2011-08-19 · Fixed CWE-399