Red Hat Security AdvisoryRHSA-2016:2963
xen security update
Released 2016-12-20 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) xen-3.0.3-148.el5_11, xen-libs-3.0.3-148.el5_11, xen-libs-3.0.3-148.el5_11.i386 +1
- Red Hat Enterprise Linux Desktop (v. 5 client) xen-3.0.3-148.el5_11, xen-libs-3.0.3-148.el5_11, xen-libs-3.0.3-148.el5_11.i386
- Red Hat Enterprise Linux Desktop Multi OS (v. 5 client) xen-3.0.3-148.el5_11, xen-3.0.3-148.el5_11.i386, xen-devel-3.0.3-148.el5_11 +1
- Red Hat Enterprise Linux Virtualization (v. 5 server) xen-3.0.3-148.el5_11, xen-3.0.3-148.el5_11.i386, xen-3.0.3-148.el5_11.ia64 +3
Fixes 1 record
Priority LOW 33
The (1) ioport_read and (2) ioport_write functions in Xen, when qemu is used as a device model within Xen, might allow local x86 HVM guest OS administrators to gain qemu process privileges via vectors involving an out-of…
CVSS 3.0HIGH 7.5· Local · High privileges · No interaction · EPSS 0.00364 · Published 2017-02-16 · Fixed CWE-264
