自己報告されたバージョン番号によると、リモートホストにインストールされているXenハイパーバイザーはCR0.TSとCR0.EMに適切に準拠していないため、x86_emulate.cの情報漏えい脆弱性の影響を受けます。x86 HVMゲストオペレーティングシステム内のローカルの攻撃者がこれを悪用し、ハイパーバイザーが命令のエミュレートを準備している間に命令を改変し、ゲストで実行しているその他のタスクのFPU、MMX、またはXMMの登録状態情報を読み取ったり操作したりする可能性があります。

Nessusは、xen.git変更ログをもとに変更セットバージョンをチェックしました。Nessusは、ゲストのハードウェア構成をチェックしていません。また、再コンパイルや再インストール前に、パッチがソースコードに手動で適用されているかどうかもチェックしていません。

リモートホストは、GLSA-201611-09（Xen：複数の脆弱性）で説明されている脆弱性による影響を受けます。Xenで、複数の脆弱性が見つかりました。詳細については、以下に記載されているCVE識別番号を参照してください。影響：悪意のあるゲスト管理者が、ホストシステムで権限を昇格させたり、サービス拒否を引き起こしたりする可能性があります。さらに、悪意のある権限のないゲストユーザーが、同じゲストの他のプログラムの機密情報（暗号化資料を含む）を取得または破損させる可能性があります。回避策：現時点では、既知の回避策はありません。

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2020-0039 for details.

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2017-0153 for details.

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2018-0248 for details.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - xsa224 xen: grant table operations mishandle reference counts (XSA-224) (CVE-2017-10921)

  - The qemu implementation in libvirt before 1.3.0 and Xen allows local guest OS users to cause a denial of     service (host disk consumption) by writing to stdout or stderr. (CVE-2014-3672)

  - Heap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to execute arbitrary     code by sending a packet with TXSTATUS_STARTPACKET set and then a crafted packet with TXSTATUS_DEVICEOWNS     set. (CVE-2015-3209)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote host is affected by the vulnerability described in GLSA-201611-09 (Xen: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Xen. Please review the       CVE identifiers referenced below for details.
  Impact :

    A malicious guest administrator could escalate their privileges on the       host system or cause a Denial of Service.  Additionally, a malicious       unprivileged guest user may be able to obtain or corrupt sensitive       information (including cryptographic material) in other programs in the       same guest.
  Workaround :

    There is no known workaround at this time.

qemu-kvm: Directory traversal flaw in 9p virtio backend [CVE-2016-7116] qemu: hw: net: Heap overflow in xlnx.xps-ethernetlite [CVE-2016-7161] CR0.TS and CR0.EM not always honored for x86 HVM guest [XSA-190, CVE-2016-7777]

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by an information disclosure vulnerability in x86_emulate.c due to a failure to properly honor CR0.TS and CR0.EM. A local attacker within an x86 HVM guest operating system can exploit this, by modifying an instruction while the hypervisor is preparing to emulate it, to read or manipulate FPU, MMX, or XMM register state information for other tasks running in the guest.

Note that Nessus has checked the changeset versions based on the xen.git change log. Nessus did not check guest hardware configurations or if patches were applied manually to the source code before a recompile and reinstall.

ID	名稱	產品	系列	已發布	已更新	嚴重性
94162	クロスタスクレジスタの状態の情報開示を尊重するXen x86 CR0.TSおよびCR0.EM（XSA-190）	Nessus	Misc.	2016/10/20	2020/7/10	medium
94893	GLSA-201611-09：Xen：複数の脆弱性（Bunker Buster）	Nessus	Gentoo Local Security Checks	2016/11/15	2021/1/11	high
140019	OracleVM 3.4 : xen (OVMSA-2020-0039) (Bunker Buster) (Foreshadow) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout) (Meltdown) (POODLE) (Spectre)	Nessus	OracleVM Local Security Checks	2020/8/28	2022/12/7	critical
103830	OracleVM 3.4 : xen (OVMSA-2017-0153)	Nessus	OracleVM Local Security Checks	2017/10/13	2021/6/3	critical
111992	OracleVM 3.4 : xen (OVMSA-2018-0248) (Bunker Buster) (Foreshadow) (Meltdown) (POODLE) (Spectre)	Nessus	OracleVM Local Security Checks	2018/8/20	2021/1/28	critical
199537	RHEL 5 : xen (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	2024/6/3	2024/6/3	critical
94893	GLSA-201611-09 : Xen: Multiple vulnerabilities (Bunker Buster)	Nessus	Gentoo Local Security Checks	2016/11/15	2021/1/11	high
94058	Fedora 24 : xen (2016-4c407cd849)	Nessus	Fedora Local Security Checks	2016/10/14	2021/1/11	critical
94162	Xen x86 CR0.TS and CR0.EM Honoring Cross-task Register State Information Disclosure (XSA-190)	Nessus	Misc.	2016/10/20	2020/7/10	medium

偵測

搜尋 Plugin

medium

high

critical

critical

critical

critical

high

critical

medium