Two Xen hypervisor flaws let a malicious VM read and write other VMs' memory
VULNERABILITYXenredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
Two Xen hypervisor flaws allow a malicious guest VM to read and write memory belonging to other VMs on the same host, including dom0. The Xen Project advisory dated November 3 says patches are available and no mitigation is known, so applying the fixed releases is the only remediation. All Xen versions from 4.6 onward are stated to be affected. The article does not give CVE identifiers or exact fixed version numbers.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Apply the patches from the Xen Project advisory to Xen hosts.
- Check whether any hypervisors in use run Xen 4.6 or later, since all those versions are affected.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
The Hacker News
Who and what is in it
Products