KLA10527 Multiple vulnerabilities in different versions of Xen

Multiple serious vulnerabilities have been found in Xen. Malicious users can exploit these vulnerabilities to cause denial of service or bypass security restrictions.

Below is a complete list of vulnerabilities

1. Unknown vulnerability can be exploited remotely via a logger or domctl manipulations;
2. Lack of restrctions can be exploited locally via a systrem variables or VNC manipulations;
3. Improper access restrictions can be exploited remotely via PCI device manipulations.

Original advisories

Related products

Xen-Server

CVE list

CVE-2015-2752 warning

CVE-2015-2751 high

CVE-2015-1563 warning

CVE-2015-2756 warning

CVE-2015-2152 warning

Solution

Update to the latest version

Get Xen

Impacts

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

• SB

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

Affected Products

• Xen 4.5 all versions and earlier