GLSA
Advocate
Joined: 12 May 2004
Posts: 2663
|
 Posted: Fri Dec 26, 2014 7:26 pm Post subject: [ GLSA 201412-42 ] Xen |
 |
|
Gentoo Linux Security Advisory
Title: Xen: Denial of Service (GLSA 201412-42)
Severity: normal
Exploitable: local
Date: December 26, 2014
Updated: December 31, 2014
Bug(s): #523524, #524200
ID: 201412-42
Synopsis
Multiple vulnerabilities have been found in Xen, possibly resulting
in Denial of Service.
Background
Xen is a bare-metal hypervisor.
Affected Packages
Package: app-emulation/xen
Vulnerable: < 4.3.3-r3
Unaffected: >= 4.2.5-r1 < 4.2.6
Unaffected: >= 4.3.3-r3
Architectures: All supported architectures
Description
Multiple vulnerabilities have been discovered in Xen. Please review the
CVE identifiers referenced below for details.
Impact
A local user could possibly cause a Denial of Service condition.
Workaround
There is no known workaround at this time.
Resolution
All xen users should upgrade to the latest version: | Code: | # emerge --sync
# emerge --ask --oneshot --verbose ">=app-emulation/xen-4.2.5-r1"
|
All xen users should upgrade to the latest version: | Code: | # emerge --sync
# emerge --ask --oneshot --verbose ">=app-emulation/xen-4.3.3-r3"
|
References
CVE-2014-7154
CVE-2014-7155
CVE-2014-7156
CVE-2014-7188
Last edited by GLSA on Thu Jun 18, 2015 4:16 am; edited 2 times in total |
|
News & Announcements
