Xen Security Advisory – XSA 108 – http://xenbits.xen.org/xsa/advisory-108.html, (Wed, Oct 1st)

Xen has issued an advisory and a related patch to address an issue that allows a “buggy or malicious HVM guest to crash the host or read data relating to other guests or the hypervisor itself.”

Xen 4.1 and onward are vulnerable, only x86 systems are vulnerable. ARM systems are not vulnerable.

Applying the patch resolves this issue.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Reposted from SANS. View original.

CyberSafe-WP-Admin