Multiple security issues have been found in the Xen virtualisation solution :

  - CVE-2015-2044     Information leak via x86 system device emulation.

  - CVE-2015-2045     Information leak in the HYPERVISOR_xen_version()     hypercall.

  - CVE-2015-2151     Missing input sanitising in the x86 emulator could     result in information disclosure, denial of service or     potentially privilege escalation.

In addition the Xen developers reported an unfixable limitation in the handling of non-standard PCI devices. Please refer to for further information.

Detections

Analytics

Debian DSA-3181-1 : xen - security update

high Nessus Plugin ID 81748