Xen allows local OS guest users to cause a denial of service (crash) or possibly obtain sensitive information or gain privileges via vectors involving transitive grants.
The product performs a calculation that generates incorrect or unintended results that are later used in security-critical decisions or resource management.
| Link | Tags |
|---|---|
| https://support.citrix.com/article/CTX225941 | third party advisory patch |
| http://www.openwall.com/lists/oss-security/2017/08/17/6 | mailing list third party advisory mitigation |
| http://www.securityfocus.com/bid/100344 | vdb entry third party advisory |
| http://www.debian.org/security/2017/dsa-3969 | third party advisory vendor advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=1477655 | issue tracking patch mitigation third party advisory |
| http://xenbits.xen.org/xsa/advisory-226.html | patch vendor advisory mitigation |
| http://www.openwall.com/lists/oss-security/2017/08/15/1 | mailing list third party advisory mitigation |
| https://security.gentoo.org/glsa/201801-14 | third party advisory vendor advisory |
| http://www.securitytracker.com/id/1039178 | vdb entry third party advisory |
| http://www.openwall.com/lists/oss-security/2020/04/14/4 | mailing list |