Test Kennung:	1.3.6.1.4.1.25623.1.0.882324
Kategorie:	CentOS Local Security Checks
Titel:	CentOS Update for xen CESA-2015:2065 centos5
Zusammenfassung:	Check the version of xen
Beschreibung:	Summary: Check the version of xen Vulnerability Insight: The xen packages contain administration tools and the xend service for managing the kernel-xen kernel for virtualization on Red Hat Enterprise Linux. A heap buffer overflow flaw was found in the way QEMU's NE2000 NIC emulation implementation handled certain packets received over the network. A privileged user inside a guest could use this flaw to crash the QEMU instance (denial of service) or potentially execute arbitrary code on the host. (CVE-2015-5279) Red Hat would like to thank Qinghao Tang of QIHU 360 Inc. for reporting this issue. All xen users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. After installing the updated packages, all running fully-virtualized guests must be restarted for this update to take effect. Affected Software/OS: xen on CentOS 5 Solution: Please install the updated packages. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2015-5279 BugTraq ID: 76746 http://www.securityfocus.com/bid/76746 Debian Security Information: DSA-3361 (Google Search) http://www.debian.org/security/2015/dsa-3361 Debian Security Information: DSA-3362 (Google Search) http://www.debian.org/security/2015/dsa-3362 http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169039.html http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169036.html http://lists.fedoraproject.org/pipermail/package-announce/2015-September/167369.html https://security.gentoo.org/glsa/201602-01 https://lists.gnu.org/archive/html/qemu-devel/2015-09/msg03984.html http://www.openwall.com/lists/oss-security/2015/09/15/3 RedHat Security Advisories: RHSA-2015:1896 http://rhn.redhat.com/errata/RHSA-2015-1896.html RedHat Security Advisories: RHSA-2015:1923 http://rhn.redhat.com/errata/RHSA-2015-1923.html RedHat Security Advisories: RHSA-2015:1924 http://rhn.redhat.com/errata/RHSA-2015-1924.html RedHat Security Advisories: RHSA-2015:1925 http://rhn.redhat.com/errata/RHSA-2015-1925.html http://www.securitytracker.com/id/1033569 SuSE Security Announcement: SUSE-SU-2015:1782 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-10/msg00019.html
Copyright	Copyright (C) 2015 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.