CVE-2008-3687

Mô tả

Tham khảo

• invisiblethingslab.com/bh08/part2.pdf
• secunia.com/advisories/31561
• theinvisiblethings.blogspot.com/2008/08/our-xen-0wning-trilogy-highlights.html
• nabble.com/-PATCH--XSM--FLASK--Argument-handling-bugs-in-XSM:FLASK-to18536032.html · Patch
• securityfocus.com/bid/30834
• securitytracker.com/id
• vupen.com/english/advisories/2008/2426
• xenbits.xensource.com/xen-3.3-testing.hg
• exchange.xforce.ibmcloud.com/vulnerabilities/44608

Lỗ hổng khác của xen

• CVE-2014-5148TRUNG BÌNH 4.6Xen 4.4.x, when running on an ARM system and "handling an unknown system register access from 64-bit userspace," returns to an instruction o…
• CVE-2009-3525CAO 7.2The pyGrub boot loader in Xen 3.0.3, 3.3.0, and Xen-3.3.1 does not support the password option in grub.conf for para-virtualized guests, whi…
• CVE-2009-1758TRUNG BÌNH 5.0The hypervisor_callback function in Xen, possibly before 3.4.0, as applied to the Linux kernel 2.6.30-rc4, 2.6.18, and probably other versio…
• CVE-2008-4993TRUNG BÌNH 6.9qemu-dm.debug in Xen 3.2.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/args temporary file.
• CVE-2007-6416TRUNG BÌNH 4.6The copy_to_user function in the PAL emulation functionality for Xen 3.1.2 and earlier, when running on ia64 systems, allows HVM guest users…