Xen Multiple Vulnerabilities

Last Update Date: 26 Jan 2016 09:42 Release Date: 26 Jan 2016 2830 Views

RISK: Medium Risk

TYPE: Servers - Other Servers

Multiple vulnerabilities have been identified in Xen, a remote attacker can exploit these vulnerabilities to trigger Denial Of Service, Elevation Of Privilege, Security Restriction Bypass and disclose Sensitive Information on the targeted system.

Impact

Denial of Service
Elevation of Privilege
Security Restriction Bypass
Information Disclosure

System / Technologies affected

Xen 3.4.0
Xen 3.4.1
Xen 4.1 or above

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

The vendor has issued a fix

Vulnerability Identifier

CVE-2016-1571
CVE-2016-1570

Source

AusCERT