Detections
Analytics
Alpine: multiple xen packages: security update to 4.4.1-r6 (deprecated)
critical Tenable Cloud Security Plugin ID 401073
Description
There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:- Use-after-free vulnerability in Xen 4.2.x, 4.3.x, and 4.4.x allows remote domains to cause a denial of
service (system crash) via a crafted hypercall during HVM guest teardown. (CVE-2015-0361)
- The do_mmu_update function in arch/x86/mm.c in Xen 4.x through 4.4.x does not properly restrict updates to
only PV page tables, which allows remote PV guests to cause a denial of service (NULL pointer dereference)
by leveraging hardware emulation services for HVM guests using Hardware Assisted Paging (HAP).
(CVE-2014-8594)
- arch/x86/x86_emulate/x86_emulate.c in Xen 3.2.1 through 4.4.x does not properly check privileges, which
allows local HVM guest users to gain privileges or cause a denial of service (crash) via a crafted (1)
CALL, (2) JMP, (3) RETF, (4) LCALL, (5) LJMP, or (6) LRET far branch instruction. (CVE-2014-8595)
- The compatibility mode hypercall argument translation in Xen 3.3.x through 4.4.x, when running on a 64-bit
hypervisor, allows local 32-bit HVM guests to cause a denial of service (host crash) via vectors involving
altering the high halves of registers while in 64-bit mode. (CVE-2014-8866)
- The acceleration support for the "REP MOVS" instruction in Xen 4.4.x, 3.2.x, and earlier lacks properly
bounds checking for memory mapped I/O (MMIO) emulated in the hypervisor, which allows local HVM guests to
cause a denial of service (host crash) via unspecified vectors. (CVE-2014-8867)
See Also
https://git.alpinelinux.org/aports/commit/?id=621b3e6ae3cef5a89353cb0868372c2b94ffa454
https://git.alpinelinux.org/aports/commit/?id=bc7a651405864891312f3556d8f87c6bcb822c7b
Plugin Details
Severity: Critical
ID: 401073
Version: Revision 1.23
Type: Local
Published: 8/16/2023
Updated: 4/30/2026
Supported Sensors: Agentless Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 7.8
Temporal Score: 5.8
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C
CVSS Score Source: CVE-2015-0361
CVSS v3
Risk Factor: Critical
Base Score: 10
Temporal Score: 8.7
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
CVSS Score Source: CVE-2014-8867
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 1/23/2015
Vulnerability Publication Date: 11/18/2014
Reference Information
CVE: CVE-2014-8594, CVE-2014-8595, CVE-2014-8866, CVE-2014-8867, CVE-2014-9030, CVE-2014-9065, CVE-2014-9066, CVE-2015-0361