Multiple security issues have been found in the Xen virtualisation solution, which may result in denial of service or information disclosure.

nine security updates CVE-2015-7969 CVE-2015-7970 CVE-2015-7813 CVE-2015-7814 CVE-2015-7812 CVE-2015-7971 CVE-2015-7835 CVE-2015-7972

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201604-03 (Xen: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Xen. Please review the       CVE identifiers referenced below for details.
  Impact :

    A local attacker could possibly cause a Denial of Service condition or       obtain sensitive information.
  Workaround :

    There is no known workaround at this time.

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2018-0248 for details.

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2020-0039 for details.

ID	Name	Product	Family	Published	Updated	Severity
87288	Debian DSA-3414-1 : xen - security update	Nessus	Debian Local Security Checks	12/10/2015	1/11/2021	medium
89359	Fedora 23 : xen-4.5.1-14.fc23 (2015-a931b02be2)	Nessus	Fedora Local Security Checks	3/4/2016	1/11/2021	high
89177	Fedora 21 : xen-4.4.3-7.fc21 (2015-242be2c240)	Nessus	Fedora Local Security Checks	3/4/2016	1/11/2021	high
90380	GLSA-201604-03 : Xen: Multiple vulnerabilities (Venom)	Nessus	Gentoo Local Security Checks	4/7/2016	1/11/2021	critical
89278	Fedora 22 : xen-4.5.1-14.fc22 (2015-6f6b79efe2)	Nessus	Fedora Local Security Checks	3/4/2016	1/11/2021	high
111992	OracleVM 3.4 : xen (OVMSA-2018-0248) (Bunker Buster) (Foreshadow) (Meltdown) (POODLE) (Spectre)	Nessus	OracleVM Local Security Checks	8/20/2018	1/28/2021	critical
140019	OracleVM 3.4 : xen (OVMSA-2020-0039) (Bunker Buster) (Foreshadow) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout) (Meltdown) (POODLE) (Spectre)	Nessus	OracleVM Local Security Checks	8/28/2020	12/7/2022	critical

Detections

Analytics

Plugins Search

medium

high

high

critical

high

critical

critical