このxen用更新プログラムでは、以下の問題を修正します。修正されたセキュリティ問題：

  - エミュレーション中にSYSCALLシングルステップが誤って処理され、これにより権限昇格が引き起こされる可能性があります。（XSA-204、bsc#1016340、CVE-2016-10013）

  - CMPXCHG8Bエミュレーションで、オペランドサイズのオーバーライドを無視することに失敗し、これによって情報漏洩が引き起こされ可能性があります。（XSA-200、bsc#1012651、CVE-2016-9932）

  - PVゲストは、サービス拒否を引き起こす割り込みをマスクできる場合があります。（XSA-202、bsc#1014298、CVE-2016-10024）

注意：Tenable Network Securityは、前述の記述ブロックをSUSEセキュリティアドバイザリから直接抽出しています。Tenableでは、新たな問題を持ち込まずに、できる限り自動的に整理して書式設定するようにしています。

このxen用更新プログラムでは、以下の問題を修正します。修正されたセキュリティ問題：

  - エミュレーション中にSYSCALLシングルステップが誤って処理され、これにより権限昇格が引き起こされる可能性があります。（XSA-204、bsc#1016340、CVE-2016-10013）

  - CMPXCHG8Bエミュレーションで、オペランドサイズのオーバーライドを無視することに失敗し、これによって情報漏洩が引き起こされ可能性があります。（XSA-200、bsc#1012651、CVE-2016-9932）

  - PVゲストは、サービス拒否を引き起こす割り込みをマスクできる場合があります。（XSA-202、bsc#1014298、CVE-2016-10024）

  - VMFUNCエミュレーションでのNULLポインターチェックの欠落により、ハイパーバイザーのクラッシュが引き起こされ、これによりサービス拒否が引き起こされる可能性があります。（XSA-203、bsc#1014300、CVE-2016-10025）

注意：Tenable Network Securityは、前述の記述ブロックをSUSEセキュリティアドバイザリから直接抽出しています。Tenableでは、新たな問題を持ち込まずに、できる限り自動的に整理して書式設定するようにしています。

リモートOracleVMシステムに、重大なセキュリティ更新に対処するために必要なパッチが、欠落しています：詳細については、Oracle VMセキュリティアドバイザリ OVMSA-2017-0153 を参照してください。

リモートのOracleVMシステムには、重大なセキュリティ更新に対処するために必要なパッチがありません：詳細については、Oracle VMセキュリティアドバイザリOVMSA-2018-0248を参照してください。

リモートOracleVMシステムに、重大なセキュリティ更新に対処するために必要なパッチが、欠落しています: 詳細については、Oracle VMセキュリティアドバイザリ OVMSA-2020-0039 を参照してください。

The version of Citrix XenServer installed on the remote host is missing a security hotfix. It is, therefore, affected by multiple vulnerabilities :

  - A flaw exists in x86 instruction CMPXCHG8B due to legacy     operand size overrides not being properly ignored when     handling prefixes. A guest attacker can exploit this to     disclose potentially sensitive information on the host     system. Note that the ability to read a small amount of     hypervisor memory is restricted to privileged-mode code     in all guests except on Citrix XenServer 6.2 SP1 and     6.0.2CC, where the attack may also be performed from     non-privileged-mode code in HVM guest VMs.
    (CVE-2016-9932)

  - A denial of service vulnerability exists when a guest     asynchronously modifies its instruction stream to effect     the clearing of EFLAGS.IF. A guest attacker can exploit     this to cause the host to hang or crash.
    (CVE-2016-10024)

  - A denial of service vulnerability exists due to a NULL     pointer dereference flaw that is triggered when the     hvmemul_vmfunc() function pointer uses inappropriate     NULL checks before indirect function calls. A guest     attacker can exploit this to cause the hypervisor to     crash. Note that the ability of privileged-mode code in     HVM guest VMs to crash the host is restricted to AMD     systems running Citrix XenServer 7.0. (CVE-2016-10025)

This update for xen fixes the following issues :

  - A Mishandling of SYSCALL singlestep during emulation     which could have lead to privilege escalation. (XSA-204,     bsc#1016340, CVE-2016-10013)

  - CMPXCHG8B emulation failed to ignore operand size     override which could have lead to information     disclosure. (XSA-200, bsc#1012651, CVE-2016-9932)

  - PV guests may have been able to mask interrupts causing     a Denial of Service. (XSA-202, bsc#1014298,     CVE-2016-10024)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for xen fixes the following issues :

  - A Mishandling of SYSCALL singlestep during emulation     which could have lead to privilege escalation. (XSA-204,     bsc#1016340, CVE-2016-10013)

  - CMPXCHG8B emulation failed to ignore operand size     override which could have lead to information     disclosure. (XSA-200, bsc#1012651, CVE-2016-9932)

  - PV guests may have been able to mask interrupts causing     a Denial of Service. (XSA-202, bsc#1014298,     CVE-2016-10024)

  - A missing NULL pointer check in VMFUNC emulation could     lead to a hypervisor crash leading to a Denial of     Servce. (XSA-203, bsc#1014300, CVE-2016-10025)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to its self-reported version number, the Xen hypervisor installed on the remote host is missing a security update. It is, therefore, affected by a denial of service vulnerability due to a flaw in the x86 instruction emulator whenever a guest asynchronously modifies its instruction stream to effect the clearing of EFLAGS.IF.
An attacker who has guest kernel administrator privileges can exploit this issue to cause the host to hang or crash.

Please note the following items :

  - Only x86 PV guests can exploit the vulnerability.

  - Neither ARM guests nor x86 HVM guests can exploit the     vulnerability.

Note that Nessus has not tested for this vulnerability but has instead relied only on the changeset versions based on the xen.git change log.
Nessus did not check guest hardware configurations or if patches were applied manually to the source code before a recompile and reinstall.

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2017-0153 for details.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - xsa224 xen: grant table operations mishandle reference counts (XSA-224) (CVE-2017-10921)

  - The qemu implementation in libvirt before 1.3.0 and Xen allows local guest OS users to cause a denial of     service (host disk consumption) by writing to stdout or stderr. (CVE-2014-3672)

  - Heap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to execute arbitrary     code by sending a packet with TXSTATUS_STARTPACKET set and then a crafted packet with TXSTATUS_DEVICEOWNS     set. (CVE-2015-3209)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2018-0248 for details.

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2020-0039 for details.

ID	名稱	產品	系列	已發布	已更新	嚴重性
96075	SUSE SLED12 / SLES12セキュリティ更新プログラム：xen （SUSE-SU-2016:3207-1）	Nessus	SuSE Local Security Checks	2016/12/22	2021/1/6	high
96076	SUSE SLED12 / SLES12セキュリティ更新プログラム：xen （SUSE-SU-2016:3208-1）	Nessus	SuSE Local Security Checks	2016/12/22	2021/1/6	high
103830	OracleVM 3.4：xen（OVMSA-2017-0153）	Nessus	OracleVM Local Security Checks	2017/10/13	2021/6/3	critical
111992	OracleVM 3.4：xen（OVMSA-2018-0248）（Bunker Buster）（Foreshadow）（Meltdown）（POODLE）（Spectre）	Nessus	OracleVM Local Security Checks	2018/8/20	2024/8/16	critical
140019	OracleVM 3.4：xen（OVMSA-2020-0039）（Bunker Buster）（Foreshadow）（MDSUM / RIDL）（MFBDS / RIDL / ZombieLoad）（MLPDS / RIDL）（MSBDS / Fallout）（Meltdown）（POODLE）（Spectre）	Nessus	OracleVM Local Security Checks	2020/8/28	2022/12/7	critical
96778	Citrix XenServer Multiple Vulnerabilities (CTX219378)	Nessus	Misc.	2017/1/25	2019/11/13	low
96075	SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2016:3207-1)	Nessus	SuSE Local Security Checks	2016/12/22	2021/1/6	high
96076	SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2016:3208-1)	Nessus	SuSE Local Security Checks	2016/12/22	2021/1/6	high
96958	Xen Asynchronous Modification EFLAGS.IF Clearing DoS (XSA-202)	Nessus	Misc.	2017/2/2	2020/7/10	medium
103830	OracleVM 3.4 : xen (OVMSA-2017-0153)	Nessus	OracleVM Local Security Checks	2017/10/13	2021/6/3	critical
199537	RHEL 5 : xen (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	2024/6/3	2024/6/3	critical
111992	OracleVM 3.4 : xen (OVMSA-2018-0248) (Bunker Buster) (Foreshadow) (Meltdown) (POODLE) (Spectre)	Nessus	OracleVM Local Security Checks	2018/8/20	2024/8/16	critical
140019	OracleVM 3.4 : xen (OVMSA-2020-0039) (Bunker Buster) (Foreshadow) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout) (Meltdown) (POODLE) (Spectre)	Nessus	OracleVM Local Security Checks	2020/8/28	2022/12/7	critical

偵測

搜尋 Plugin

high

high

critical

critical

critical

low

high

high

medium

critical

critical

critical

critical