Lucene search
Gentoo FoundationMGASA-2024-0115HistoryApr 10, 2024 - 7:03 a.m.
Updated xen packages fix security vulnerabilities
2024-04-1007:03:52
Gentoo Foundation
advisories.mageia.org
14
xen
security vulnerabilities
x86
shadow stack
exceptions
emulation stubs
register file data sampling
ghostrace
speculative race conditions
cve-2023-46841
cve-2023-28746
cve-2024-2193
unix
6.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
7.3 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
15.7%
x86: shadow stack vs exceptions from emulation stubs. (CVE-2023-46841) x86: Register File Data Sampling. (CVE-2023-28746) GhostRace: Speculative Race Conditions. (CVE-2024-2193)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 9 | noarch | xen | < 4.17.3-1.1 | xen-4.17.3-1.1.mga9 |
Related
nessus
nessus
Fedora 40 : xen (2024-3a36322c4b)
2024-04-29 00:00:00
SUSE SLES12 Security Update : xen (SUSE-SU-2024:1105-1)
2024-04-08 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2024-0115)
2024-04-11 00:00:00
Fedora: Security Advisory for xen (FEDORA-2024-3a36322c4b)
2024-03-25 00:00:00
openSUSE: Security Advisory for xen (SUSE-SU-2024:1102-1)
2024-04-09 00:00:00
fedora
fedora
[SECURITY] Fedora 40 Update: xen-4.18.1-1.fc40
2024-03-23 00:54:07
[SECURITY] Fedora 39 Update: xen-4.17.2-8.fc39
2024-03-30 01:09:49
[SECURITY] Fedora 38 Update: xen-4.17.2-8.fc38
2024-03-30 01:44:40
cve
cve
nvd
nvd
osv
osv
cvelist
cvelist
CVE-2023-46841 x86: shadow stack vs exceptions from emulation stubs
2024-03-20 10:40:36
CVE-2024-2193 Speculative Race Condition impacts modern CPU architectures that support speculative execution, also known as GhostRace.
2024-03-15 18:03:32
CVE-2023-28746
2024-03-14 16:45:50
debiancve
debiancve
ubuntucve
ubuntucve
xen
xen
x86: shadow stack vs exceptions from emulation stubs
2024-02-27 10:38:00
GhostRace: Speculative Race Conditions
2024-03-12 16:44:00
x86: Register File Data Sampling
2024-03-12 16:44:00
veracode
veracode
Speculative Race Condition
2024-03-20 23:42:26
Information Exposure
2024-03-16 08:18:03
vulnrichment
vulnrichment
CVE-2023-28746
2024-03-14 16:45:50
amd
amd
Speculative Race Conditions (SRCs)
2024-03-12 00:00:00
talosblog
talosblog
Not everything has to be a massive, global cyber attack
2024-03-14 18:00:08
cert
cert
intel
intel
2024.1 IPU - Intel® Atom® Processor Advisory
2024-03-12 00:00:00
redhatcve
redhatcve
CVE-2023-28746
2024-03-21 14:31:21
CVE-2024-2193
2024-03-13 08:07:30
alpinelinux
alpinelinux
CVE-2023-28746
2024-03-14 17:15:50
mscve
mscve
Intel: CVE-2023-28746 Register File Data Sampling (RFDS)
2024-03-12 07:00:00
amazon
amazon
Medium: kernel
2024-04-24 22:15:00
f5
f5
thn
thn
GhostRace – New Data Leak Vulnerability Affects Modern CPUs
2024-03-15 17:46:00
Researchers Uncover First Native Spectre v2 Exploit Against Linux Kernel
2024-04-10 09:26:00
citrix
citrix
Citrix Hypervisor Security Update for CVE-2023-39368 and CVE-2023-38575
2024-03-12 17:06:58
hp
hp
Intel 2024.1 IPU - BIOS March 2024 Security Updates
2024-03-13 00:00:00
mageia
mageia
Updated microcode packages fix security vulnerabilities
2024-03-31 06:27:58
debian
debian
[SECURITY] [DLA 3808-1] intel-microcode security update
2024-05-04 15:21:16
[SECURITY] [DSA 5658-1] linux security update
2024-04-13 06:38:27
[SECURITY] [DSA 5681-1] linux security update
2024-05-06 18:31:39
freebsd
freebsd
Intel CPUs -- multiple vulnerabilities
2023-03-12 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2024-5.0-0245
2024-04-12 00:00:00
Moderate Photon OS Security Update - PHSA-2024-4.0-0607
2024-05-10 00:00:00
chrome
chrome
Stable Channel Update for ChromeOS / ChromeOS Flex
2024-03-05 00:00:00
ubuntu
ubuntu
Intel Microcode vulnerabilities
2024-05-29 00:00:00
mskb
mskb
March 12, 2024—KB5035919 (Security-only update)
2024-03-12 07:00:00
March 12, 2024—KB5035933 (Security-only update)
2024-03-12 07:00:00
March 12, 2024—KB5035920 (Monthly Rollup)
2024-03-12 07:00:00
kaspersky
kaspersky
KLA65123 Multiple vulnerabilities in Microsoft Products (ESU)
2024-03-12 00:00:00
KLA65126 Multiple vulnerabilities in Microsoft Windows
2024-03-12 00:00:00
rapid7blog
rapid7blog
Patch Tuesday - March 2024
2024-03-12 19:47:44
6.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
7.3 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
15.7%
Related for MGASA-2024-0115