Two Xen hypervisor flaws let a malicious VM read and write other VMs' memory
VULNERABILITYXenredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
Two flaws in the Xen hypervisor allow a malicious guest VM to read and write the memory of other VMs on the same host, including dom0, which by default has full permissions and manages the others. The Xen Project published an advisory on November 3 saying patches are out and no mitigation is known. All Xen versions from 4.6 onward are reported as vulnerable.
For IT people · Written by AI from 1 source · Wrong?
What to do
- Apply the patches from the Xen Project advisory to Xen hosts.
- Check whether any hypervisors in use run Xen 4.6 or later, since all those versions are affected.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
The Hacker News
Who and what is in it
Products