Xen 3.1.1 allows virtual guest system users to cause a denial of service (hypervisor crash) by using a debug register (DR7) to set certain breakpoints.

This update fixes Xen security issues.

Two security problems were fixed: CVE-2007-5906: Xen allowed virtual guest system users to cause a denial of service (hypervisor crash) by using a debug register (DR7) to set certain breakpoints.

CVE-2007-5907: Xen 3.1.1 does not prevent modification of the CR4 TSC from applications, which allows pv guests to cause a denial of service (crash).

This update fixes various Xen issues.

Two security problems were fixed: CVE-2007-5906: Xen allowed virtual guest system users to cause a denial of service (hypervisor crash) by using a debug register (DR7) to set certain breakpoints.

CVE-2007-5907: Xen 3.1.1 does not prevent modification of the CR4 TSC from applications, which allows pv guests to cause a denial of service (crash).

Also the following bugs were fixed: 279062: Timer ISR/1: Time went backwards 340379: Xen-3.04_13138-0.52 not working with FV File-Backed VMs

This update fixes various Xen issues.

Two security problems were fixed: CVE-2007-5906: Xen allowed virtual guest system users to cause a denial of service (hypervisor crash) by using a debug register (DR7) to set certain breakpoints.

CVE-2007-5907: Xen 3.1.1 does not prevent modification of the CR4 TSC from applications, which allows pv guests to cause a denial of service (crash).

Also the following bugs were fixed: 279062: Timer ISR/1: Time went backwards 286859: Fix booting from SAN 310279: Kernel Panic while booting Xen 338486: xen fails to start when option 'irq= [ <value> ]' is given in domU config

This update fixes various Xen issues.

Two security problems were fixed: CVE-2007-5906: Xen allowed virtual guest system users to cause a denial of service (hypervisor crash) by using a debug register (DR7) to set certain breakpoints.

  - Xen 3.1.1 does not prevent modification of the CR4 TSC     from applications, which allows pv guests to cause a     denial of service (crash). (CVE-2007-5907)

Also the following bugs were fixed: 279062: Timer ISR/1: Time went backwards 340379: Xen-3.04_13138-0.52 not working with FV File-Backed VMs

ID	Name	Product	Family	Severity
29963	openSUSE 10 Security Update : xen (xen-4901)	Nessus	SuSE Local Security Checks	medium
29891	openSUSE 10 Security Update : xen (xen-4764)	Nessus	SuSE Local Security Checks	medium
29792	openSUSE 10 Security Update : xen (xen-4854)	Nessus	SuSE Local Security Checks	medium
29791	SuSE 10 Security Update : xen (ZYPP Patch Number 4766)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2007-5906

medium

Tenable Plugins

medium

medium

medium

medium