CVE-2007-5907

概要

参考情報

• lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html
• lists.xensource.com/archives/html/xen-devel/2007-10/msg00932.html
• secunia.com/advisories/28405
• secunia.com/advisories/28412
• secunia.com/advisories/28636
• secunia.com/advisories/32485
• novell.com/linux/security/advisories/suse_security_summary_report.html
• redhat.com/support/errata/RHSA-2008-0957.html
• securityfocus.com/bid/27219
• oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10380

xen のその他の脆弱性

• CVE-2008-1619中 4.3The ssm_i emulation in Xen 5.1 on IA64 architectures allows attackers to cause a denial of service (dom0 panic) via certain traffic, as demo…
• CVE-2007-6207低 2.1Xen 3.x, possibly before 3.1.2, when running on IA64 systems, does not check the RID value for mov_to_rr, which allows a VTi domain to read …
• CVE-2007-5906中 4.7Xen 3.1.1 allows virtual guest system users to cause a denial of service (hypervisor crash) by using a debug register (DR7) to set certain b…
• CVE-2007-3919中 6.0(1) xenbaked and (2) xenmon.py in Xen 3.1 and earlier allow local users to truncate arbitrary files via a symlink attack on /tmp/xenq-shm.
• CVE-2007-4993中 6.9pygrub (tools/pygrub/src/GrubConf.py) in Xen 3.0.3, when booting a guest domain, allows local users with elevated privileges in the guest do…