[SECURITY] [DLA 1230-1] xen security update

2018-01-0506:57:15

lists.debian.org

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

8.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

8.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.7%

JSON

Package : xen
Version : 4.1.6.lts1-11
CVE ID : CVE-2017-17044 CVE-2017-17045 CVE-2017-17563 CVE-2017-17564
CVE-2017-17565 CVE-2017-17566

Multiple vulnerabilities have been discovered in the Xen hypervisor, which
could result in denial of service, information leaks, privilege escalation
or the execution of arbitrary code.

For Debian 7 "Wheezy", these problems have been fixed in version
4.1.6.lts1-11.

We recommend that you upgrade your xen packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

OSVersionArchitecturePackageVersionFilename
Debian7allxen-docs-4.1< 4.1.6.lts1-11xen-docs-4.1_4.1.6.lts1-11_all.deb
Debian7amd64libxen-ocaml-dev< 4.1.6.lts1-11libxen-ocaml-dev_4.1.6.lts1-11_amd64.deb
Debian8amd64xenstore-utils< 4.4.4lts2-0+deb8u1xenstore-utils_4.4.4lts2-0+deb8u1_amd64.deb
Debian9amd64xen-utils-4.8< 4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1xen-utils-4.8_4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1_amd64.deb
Debian9i386xenstore-utils< 4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1xenstore-utils_4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1_i386.deb
Debian7allxen< 4.1.6.lts1-11xen_4.1.6.lts1-11_all.deb
Debian8amd64libxenstore3.0< 4.4.4lts2-0+deb8u1libxenstore3.0_4.4.4lts2-0+deb8u1_amd64.deb
Debian8amd64xen-system-amd64< 4.4.4lts2-0+deb8u1xen-system-amd64_4.4.4lts2-0+deb8u1_amd64.deb
Debian7i386xenstore-utils< 4.1.6.lts1-11xenstore-utils_4.1.6.lts1-11_i386.deb
Debian7amd64xen-system-amd64< 4.1.6.lts1-11xen-system-amd64_4.1.6.lts1-11_amd64.deb

OS	Version	Architecture	Package	Version	Filename
Debian	7	all	xen-docs-4.1	< 4.1.6.lts1-11	xen-docs-4.1_4.1.6.lts1-11_all.deb
Debian	7	amd64	libxen-ocaml-dev	< 4.1.6.lts1-11	libxen-ocaml-dev_4.1.6.lts1-11_amd64.deb
Debian	8	amd64	xenstore-utils	< 4.4.4lts2-0+deb8u1	xenstore-utils_4.4.4lts2-0+deb8u1_amd64.deb
Debian	9	amd64	xen-utils-4.8	< 4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1	xen-utils-4.8_4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1_amd64.deb
Debian	9	i386	xenstore-utils	< 4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1	xenstore-utils_4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1_i386.deb
Debian	7	all	xen	< 4.1.6.lts1-11	xen_4.1.6.lts1-11_all.deb
Debian	8	amd64	libxenstore3.0	< 4.4.4lts2-0+deb8u1	libxenstore3.0_4.4.4lts2-0+deb8u1_amd64.deb
Debian	8	amd64	xen-system-amd64	< 4.4.4lts2-0+deb8u1	xen-system-amd64_4.4.4lts2-0+deb8u1_amd64.deb
Debian	7	i386	xenstore-utils	< 4.1.6.lts1-11	xenstore-utils_4.1.6.lts1-11_i386.deb
Debian	7	amd64	xen-system-amd64	< 4.1.6.lts1-11	xen-system-amd64_4.1.6.lts1-11_amd64.deb