CVE-2007-4993

概要

参考情報

• bugzilla.xensource.com/bugzilla/show_bug.cgi
• secunia.com/advisories/26986 · Vendor Advisory
• secunia.com/advisories/27047
• secunia.com/advisories/27072
• secunia.com/advisories/27085
• secunia.com/advisories/27103
• secunia.com/advisories/27141
• secunia.com/advisories/27161
• secunia.com/advisories/27486
• debian.org/security/2007/dsa-1384
• mandriva.com/security/advisories
• redhat.com/support/errata/RHSA-2007-0323.html
• securityfocus.com/archive/1/481825/100/0/threaded
• securityfocus.com/bid/25825
• ubuntu.com/usn/usn-527-1
• vupen.com/english/advisories/2007/3348
• issues.rpath.com/browse/RPL-1752
• oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11240
• redhat.com/archives/fedora-package-announce/2007-November/msg00004.html
• redhat.com/archives/fedora-package-announce/2007-October/msg00030.html
• redhat.com/archives/fedora-package-announce/2007-October/msg00082.html

xen のその他の脆弱性

• CVE-2008-1619中 4.3The ssm_i emulation in Xen 5.1 on IA64 architectures allows attackers to cause a denial of service (dom0 panic) via certain traffic, as demo…
• CVE-2007-6207低 2.1Xen 3.x, possibly before 3.1.2, when running on IA64 systems, does not check the RID value for mov_to_rr, which allows a VTi domain to read …
• CVE-2007-5907中 4.7Xen 3.1.1 does not prevent modification of the CR4 TSC from applications, which allows pv guests to cause a denial of service (crash).
• CVE-2007-5906中 4.7Xen 3.1.1 allows virtual guest system users to cause a denial of service (hypervisor crash) by using a debug register (DR7) to set certain b…
• CVE-2007-3919中 6.0(1) xenbaked and (2) xenmon.py in Xen 3.1 and earlier allow local users to truncate arbitrary files via a symlink attack on /tmp/xenq-shm.