DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Xen: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2021-11-23
Ein lokaler Angreifer kann mehrere Schwachstellen in Xen ausnutzen, um seine Privilegien zu erhöhen, beliebigen Programmcode auszuführen, Informationen offenzulegen oder einen Denial of Service Zustand herbeizuführen.
01
beschreibt (7)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-28703US | high7.0 | — | ||
grant table v2 status pages may remain accessible after de-allocation (take two) Guest get permitted access to certain Xen-owned pages of memory. The majority of such pages remain… | ||||
| CVE-2021-28709US | high7.8 | — | ||
issues with partially successful P2M updates on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.]… | ||||
| CVE-2021-28705US | high7.8 | — | ||
issues with partially successful P2M updates on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.]… | ||||
| CVE-2021-28708US | high8.8 | — | ||
PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] x86 HVM and PVH g… | ||||
| CVE-2021-28707US | high8.8 | — | ||
PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] x86 HVM and PVH g… | ||||
| CVE-2021-28706US | high8.6 | — | ||
guests may exceed their designated memory limit When a guest is permitted to have close to 16TiB of memory, it may be able to issue hypercalls to increase its memory allocation bey… | ||||
| CVE-2021-28704US | high8.8 | — | ||
PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] x86 HVM and PVH g… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SUSE Security Update SUSE-SU-2021:3851-1 vom 2021-12-01external
- SUSE Security Update SUSE-SU-2021:3849-1 vom 2021-12-01external
- SUSE Security Update SUSE-SU-2021:3842-1 vom 2021-12-01external
- SUSE Security Update SUSE-SU-2021:3852-1 vom 2021-12-01external
- SUSE Security Update SUSE-SU-2021:14848-1 vom 2021-12-01external
- SUSE Security Update SUSE-SU-2021:3888-1 vom 2021-12-03external
- SUSE Security Update SUSE-SU-2021:3968-1 vom 2021-12-07external
- SUSE Security Update SUSE-SU-2021:3977-1 vom 2021-12-09external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan