CVE-2007-5906

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html
• lists.xensource.com/archives/html/xen-devel/2007-10/msg01048.html · Patch
• secunia.com/advisories/28405
• secunia.com/advisories/28412
• secunia.com/advisories/28636
• novell.com/linux/security/advisories/suse_security_summary_report.html
• securityfocus.com/bid/27219

xen のその他の脆弱性

• CVE-2008-1619中 4.3The ssm_i emulation in Xen 5.1 on IA64 architectures allows attackers to cause a denial of service (dom0 panic) via certain traffic, as demo…
• CVE-2007-6207低 2.1Xen 3.x, possibly before 3.1.2, when running on IA64 systems, does not check the RID value for mov_to_rr, which allows a VTi domain to read …
• CVE-2007-5907中 4.7Xen 3.1.1 does not prevent modification of the CR4 TSC from applications, which allows pv guests to cause a denial of service (crash).
• CVE-2007-3919中 6.0(1) xenbaked and (2) xenmon.py in Xen 3.1 and earlier allow local users to truncate arbitrary files via a symlink attack on /tmp/xenq-shm.
• CVE-2007-4993中 6.9pygrub (tools/pygrub/src/GrubConf.py) in Xen 3.0.3, when booting a guest domain, allows local users with elevated privileges in the guest do…