xen: multiple vulnerabilities
| Package(s): | xen | CVE #(s): | CVE-2015-2044 CVE-2015-2045 CVE-2015-2151 | ||||||||||||||||||||||||||||||||||||||||||||||||||||
| Created: | March 11, 2015 | Updated: | March 23, 2015 | ||||||||||||||||||||||||||||||||||||||||||||||||||||
| Description: | From the Debian advisory:
Multiple security issues have been found in the Xen virtualisation solution: CVE-2015-2044: Information leak via x86 system device emulation. CVE-2015-2045: Information leak in the HYPERVISOR_xen_version() hypercall. CVE-2015-2151: Missing input sanitising in the x86 emulator could result in information disclosure, denial of service or potentially privilege escalation. | ||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||