[ GLSA 202003-56 ] Xen

[GLSA]

Gentoo Linux Security Advisory

Title: Xen: Multiple vulnerabilities (GLSA 202003-56)
Severity: high
Exploitable: local
Date: 2020-03-25
Bug(s): #686024, #699048, #699996, #702644
ID: 202003-56

Synopsis

Multiple vulnerabilities have been found in Xen, the worst of which
could allow for privilege escalation.


Background

Xen is a bare-metal hypervisor.

Affected Packages

Package: app-emulation/xen
Vulnerable: < 4.12.0-r1
Unaffected: >= 4.12.0-r1
Architectures: All supported architectures

Package: app-emulation/xen-tools
Vulnerable: < 4.12.0-r1
Unaffected: >= 4.12.0-r1
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in Xen. Please review the
referenced CVE identifiers for details.


Impact

A local attacker could potentially gain privileges on the host system or
cause a Denial of Service condition.


Workaround

There is no known workaround at this time.

Resolution

All Xen users should upgrade to the latest version: