Multiple vulnerabilities in different versions of Xen

Description

Multiple serious vulnerabilities have been found in Xen. Malicious users can exploit these vulnerabilities to cause denial of service or bypass security restrictions.

Below is a complete list of vulnerabilities

1. Unknown vulnerability can be exploited remotely via a logger or domctl manipulations;
2. Lack of restrctions can be exploited locally via a systrem variables or VNC manipulations;
3. Improper access restrictions can be exploited remotely via PCI device manipulations.

Original advisories

Related products

• Xen-Server

CVE list

• CVE-2015-2752
  warning
• CVE-2015-2751
  high
• CVE-2015-1563
  warning
• CVE-2015-2756
  warning
• CVE-2015-2152
  warning

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com