The x86 emulator in Xen 3.2.x through 4.5.x does not properly ignore segment overrides for instructions with register operands, which allows local guest users to obtain sensitive information, cause a denial of service (memory corruption), or possibly execute arbitrary code via unspecified vectors.

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-04501 advisory.

  - Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as     used in a certain Motorola build of Android 4.1.2 and other products, allows local users to create a read-     write memory mapping for the entirety of kernel memory, and consequently gain privileges, via crafted     /dev/graphics/fb0 mmap2 system calls, as demonstrated by the Motochopper pwn program. (CVE-2013-2596)

  - The x86 emulator in Xen 3.2.x through 4.5.x does not properly ignore segment overrides for instructions     with register operands, which allows local guest users to obtain sensitive information, cause a denial of     service (memory corruption), or possibly execute arbitrary code via unspecified vectors. (CVE-2015-2151)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This plugin has been deprecated as it is a duplicate of oraclelinux_ELSA-2016-0450-1.nasl (plugin ID 89978).

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2020-0039 for details.

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2018-0248 for details.

The remote host is affected by the vulnerability described in GLSA-201604-03 (Xen: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Xen. Please review the       CVE identifiers referenced below for details.
  Impact :

    A local attacker could possibly cause a Denial of Service condition or       obtain sensitive information.
  Workaround :

    There is no known workaround at this time.

Updated kernel packages that fix two security issues and two bugs are now available for Red Hat Enterprise Linux 5.

Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system.

* An integer overflow flaw was found in the way the Linux kernel's Frame Buffer device implementation mapped kernel memory to user space via the mmap syscall. A local user able to access a frame buffer device file (/dev/fb*) could possibly use this flaw to escalate their privileges on the system. (CVE-2013-2596, Important)

* It was found that the Xen hypervisor x86 CPU emulator implementation did not correctly handle certain instructions with segment overrides, potentially resulting in a memory corruption. A malicious guest user could use this flaw to read arbitrary data relating to other guests, cause a denial of service on the host, or potentially escalate their privileges on the host. (CVE-2015-2151, Important)

This update also fixes the following bugs :

* Previously, the CPU power of a CPU group could be zero. As a consequence, a kernel panic occurred at 'find_busiest_group+570' with do_divide_error. The provided patch ensures that the division is only performed if the CPU power is not zero, and the aforementioned panic no longer occurs. (BZ#1209728)

* Prior to this update, a bug occurred when performing an online resize of an ext4 file system which had been previously converted from ext3. As a consequence, the kernel crashed. The provided patch fixes online resizing for such file systems by limiting the blockgroup search loop for non-extent files, and the mentioned kernel crash no longer occurs. (BZ#1301100)

All kernel users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. The system must be rebooted for this update to take effect.

- An integer overflow flaw was found in the way the Linux     kernel's Frame Buffer device implementation mapped     kernel memory to user space via the mmap syscall. A     local user able to access a frame buffer device file     (/dev/fb*) could possibly use this flaw to escalate     their privileges on the system. (CVE-2013-2596,     Important)

  - It was found that the Xen hypervisor x86 CPU emulator     implementation did not correctly handle certain     instructions with segment overrides, potentially     resulting in a memory corruption. A malicious guest user     could use this flaw to read arbitrary data relating to     other guests, cause a denial of service on the host, or     potentially escalate their privileges on the host.
    (CVE-2015-2151, Important)

This update also fixes the following bugs :

  - Previously, the CPU power of a CPU group could be zero.
    As a consequence, a kernel panic occurred at     'find_busiest_group+570' with do_divide_error. The     provided patch ensures that the division is only     performed if the CPU power is not zero, and the     aforementioned panic no longer occurs.

  - Prior to this update, a bug occurred when performing an     online resize of an ext4 file system which had been     previously converted from ext3. As a consequence, the     kernel crashed. The provided patch fixes online resizing     for such file systems by limiting the blockgroup search     loop for non- extent files, and the mentioned kernel     crash no longer occurs.

The system must be rebooted for this update to take effect.

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-0450 advisory.

    - [fb] vm: convert fb_mmap to vm_iomap_memory() helper (Jacob Tanenbaum) [1035240] {CVE-2013-2596}
    - [s390] add dummy io_remap_pfn_range() to asm-s390/pgtable.h (Jacob Tanenbaum) [1035240] {CVE-2013-2596}
    - [mm] vm: add vm_iomap_memory() helper function (Jacob Tanenbaum) [1035240] {CVE-2013-2596}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Xen Project reports :

Instructions with register operands ignore eventual segment overrides encoded for them. Due to an insufficiently conditional assignment such a bogus segment override can, however, corrupt a pointer used subsequently to store the result of the instruction.

A malicious guest might be able to read sensitive data relating to other guests, or to cause denial of service on the host. Arbitrary code execution, and therefore privilege escalation, cannot be excluded.

Xen was updated to 4.4.2 to fix multiple vulnerabilities and non-security bugs.

The following vulnerabilities were fixed :

  - CVE-2015-4103: Potential unintended writes to host MSI     message data field via qemu (XSA-128) (boo#931625)

  - CVE-2015-4104: PCI MSI mask bits inadvertently exposed     to guests (XSA-129) (boo#931626)

  - CVE-2015-4105: Guest triggerable qemu MSI-X pass-through     error messages (XSA-130) (boo#931627)

  - CVE-2015-4106: Unmediated PCI register access in qemu     (XSA-131) (boo#931628)

  - CVE-2015-4164: DoS through iret hypercall handler     (XSA-136) (boo#932996)

  - CVE-2015-4163: GNTTABOP_swap_grant_ref operation     misbehavior (XSA-134) (boo#932790)

  - CVE-2015-3209: heap overflow in qemu pcnet controller     allowing guest to host escape (XSA-135) (boo#932770)

  - CVE-2015-3456: Fixed a buffer overflow in the floppy     drive emulation, which could be used to denial of     service attacks or potential code execution against the     host. ()

  - CVE-2015-3340: Xen did not initialize certain fields,     which allowed certain remote service domains to obtain     sensitive information from memory via a (1)     XEN_DOMCTL_gettscinfo or (2)     XEN_SYSCTL_getdomaininfolist request. ()

  - CVE-2015-2752: Long latency MMIO mapping operations are     not preemptible (XSA-125 boo#922705)

  - CVE-2015-2756: Unmediated PCI command register access in     qemu (XSA-126 boo#922706)

  - CVE-2015-2751: Certain domctl operations may be abused     to lock up the host (XSA-127 boo#922709)

  - CVE-2015-2151: Hypervisor memory corruption due to x86     emulator flaw (boo#919464 XSA-123)

  - CVE-2015-2045: Information leak through version     information hypercall (boo#918998 XSA-122)

  - CVE-2015-2044: Information leak via internal x86 system     device emulation (boo#918995 (XSA-121)

  - CVE-2015-2152: HVM qemu unexpectedly enabling emulated     VGA graphics backends (boo#919663 XSA-119)

  - CVE-2014-3615: information leakage when guest sets high     resolution (boo#895528)

The following non-security bugs were fixed :

  - xentop: Fix memory leak on read failure 

  - boo#923758: xen dmesg contains bogus output in early     boot

  - boo#921842: Xentop doesn't display disk statistics for     VMs using qdisks

  - boo#919098: L3: XEN blktap device intermittently fails     to connect 

  - boo#882089: Windows 2012 R2 fails to boot up with     greater than 60 vcpus

  - boo#903680: Problems with detecting free loop devices on     Xen guest startup

  - boo#861318: xentop reports 'Found interface vif101.0 but     domain 101 does not exist.'

  - boo#901488: Intel ixgbe driver assigns rx/tx queues per     core resulting in irq problems on servers with a large     amount of CPU cores

  - boo#910254: SLES11 SP3 Xen VT-d igb NIC doesn't work

  - boo#912011: high ping latency after upgrade to latest     SLES11SP3 on xen Dom0

  - boo#906689: let systemd schedule xencommons after     network-online.target and remote-fs.target so that     xendomains has access to remote shares

The following functionality was enabled or enhanced :

  - Enable spice support in qemu for x86_64

  - Add Qxl vga support

  - Enhancement to virsh/libvirtd 'send-key' command     (FATE#317240)

  - Add domain_migrate_constraints_set API to Xend's http     interface (FATE#317239)

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2015-0068 for details.

The Virtualization service XEN was updated to fix various bugs and security issues.

The following security issues have been fixed :

CVE-2015-2756: XSA-126: Unmediated PCI command register access in qemu could have lead to denial of service attacks against the host, if PCI cards are passed through to guests.

XSA-125: Long latency MMIO mapping operations were not preemptible.

CVE-2015-2151: XSA-123: Instructions with register operands ignored eventual segment overrides encoded for them. Due to an insufficiently conditional assignment such a bogus segment override could have, however, corrupted a pointer used subsequently to store the result of the instruction.

CVE-2015-2045: XSA-122: The code handling certain sub-operations of the HYPERVISOR_xen_version hypercall failed to fully initialize all fields of structures subsequently copied back to guest memory. Due to this hypervisor stack contents were copied into the destination of the operation, thus becoming visible to the guest.

CVE-2015-2044: XSA-121: Emulation routines in the hypervisor dealing with certain system devices checked whether the access size by the guest is a supported one. When the access size is unsupported these routines failed to set the data to be returned to the guest for read accesses, so that hypervisor stack contents were copied into the destination of the operation, thus becoming visible to the guest.

Also fixed :

Fully virtualized guest install from network source failed with 'cannot find guest domain' in XEN. (bsc#919341)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Virtualization service XEN was updated to fix various bugs and security issues.

The following security issues have been fixed :

CVE-2015-2756: XSA-126: Unmediated PCI command register access in qemu could have lead to denial of service attacks against the host, if PCI cards are passed through to guests.

XSA-125: Long latency MMIO mapping operations were not preemptible.

CVE-2015-2151: XSA-123: Instructions with register operands ignored eventual segment overrides encoded for them. Due to an insufficiently conditional assignment such a bogus segment override could have, however, corrupted a pointer used subsequently to store the result of the instruction.

CVE-2015-2045: XSA-122: The code handling certain sub-operations of the HYPERVISOR_xen_version hypercall failed to fully initialize all fields of structures subsequently copied back to guest memory. Due to this hypervisor stack contents were copied into the destination of the operation, thus becoming visible to the guest.

CVE-2015-2044: XSA-121: Emulation routines in the hypervisor dealing with certain system devices checked whether the access size by the guest is a supported one. When the access size is unsupported these routines failed to set the data to be returned to the guest for read accesses, so that hypervisor stack contents were copied into the destination of the operation, thus becoming visible to the guest.

Also fixed :

Regular crashes of dom-0 on different servers due to races in MCE access were fixed. bsc#907755

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Virtualization service XEN was updated to fix various bugs and security issues.

The following security issues have been fixed :

CVE-2015-2756: XSA-126: Unmediated PCI command register access in qemu could have lead to denial of service attacks against the host, if PCI cards are passed through to guests.

XSA-125: Long latency MMIO mapping operations were not preemptible.

CVE-2015-2151: XSA-123: Instructions with register operands ignored eventual segment overrides encoded for them. Due to an insufficiently conditional assignment such a bogus segment override could have, however, corrupted a pointer used subsequently to store the result of the instruction.

CVE-2015-2045: XSA-122: The code handling certain sub-operations of the HYPERVISOR_xen_version hypercall failed to fully initialize all fields of structures subsequently copied back to guest memory. Due to this hypervisor stack contents were copied into the destination of the operation, thus becoming visible to the guest.

CVE-2015-2044: XSA-121: Emulation routines in the hypervisor dealing with certain system devices checked whether the access size by the guest is a supported one. When the access size is unsupported these routines failed to set the data to be returned to the guest for read accesses, so that hypervisor stack contents were copied into the destination of the operation, thus becoming visible to the guest.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Virtualization service XEN was updated to fix various bugs and security issues.

The following security issues have been fixed :

XSA-125: Long latency MMIO mapping operations were not preemptible.

CVE-2015-2151: XSA-123: Instructions with register operands ignored eventual segment overrides encoded for them. Due to an insufficiently conditional assignment such a bogus segment override could have, however, corrupted a pointer used subsequently to store the result of the instruction.

CVE-2015-2045: XSA-122: The code handling certain sub-operations of the HYPERVISOR_xen_version hypercall failed to fully initialize all fields of structures subsequently copied back to guest memory. Due to this hypervisor stack contents were copied into the destination of the operation, thus becoming visible to the guest.

CVE-2015-2044: XSA-121: Emulation routines in the hypervisor dealing with certain system devices checked whether the access size by the guest is a supported one. When the access size is unsupported these routines failed to set the data to be returned to the guest for read accesses, so that hypervisor stack contents were copied into the destination of the operation, thus becoming visible to the guest.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The XEN hypervisor received updates to fix various security issues and bugs.

The following security issues were fixed :

  - CVE-2015-2151: XSA-123: A hypervisor memory corruption     due to x86 emulator flaw.

  - CVE-2015-2045: XSA-122: Information leak through version     information hypercall.

  - CVE-2015-2044: XSA-121: Information leak via internal     x86 system device emulation.

  - CVE-2015-2152: XSA-119: HVM qemu was unexpectedly     enabling emulated VGA graphics backends.

  - CVE-2014-3615: Information leakage when guest sets high     graphics resolution.

  - CVE-2015-0361: XSA-116: A xen crash due to use after     free on hvm guest teardown.

  - CVE-2014-9065, CVE-2014-9066: XSA-114: xen: p2m lock     starvation.

Also the following bugs were fixed :

  - bnc#919098 - XEN blktap device intermittently fails to     connect

  - bnc#882089 - Windows 2012 R2 fails to boot up with     greater than 60 vcpus

  - bnc#903680 - Problems with detecting free loop devices     on Xen guest startup

  - bnc#861318 - xentop reports 'Found interface vif101.0     but domain 101 does not exist.'

  - Update seabios to rel-1.7.3.1 which is the correct     version for Xen 4.4

  - Enhancement to virsh/libvirtd 'send-key' command The xen     side small fix. (FATE#317240)

  - bnc#901488 - Intel ixgbe driver assigns rx/tx queues per     core resulting in irq problems on servers with a large     amount of CPU cores

  - bnc#910254 - SLES11 SP3 Xen VT-d igb NIC doesn't work

  - Add domain_migrate_constraints_set API to Xend's http     interface (FATE#317239)

  - Restore missing fixes from block-dmmd script

  - bnc#904255 - XEN boot hangs in early boot on UEFI system

  - bsc#912011 - high ping latency after upgrade to latest     SLES11SP3 on xen Dom0

  - Fix missing banner by restoring the figlet program.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Virtualization service XEN was updated to fix various bugs and security issues.

The following security issues have been fixed :

  - XSA-126: Unmediated PCI command register access in qemu     could have lead to denial of service attacks against the     host, if PCI cards are passed through to guests.
    (CVE-2015-2756)

  - XSA-125: Long latency MMIO mapping operations were not     preemptible.

  - XSA-123: Instructions with register operands ignored     eventual segment overrides encoded for them. Due to an     insufficiently conditional assignment such a bogus     segment override could have, however, corrupted a     pointer used subsequently to store the result of the     instruction. (CVE-2015-2151)

  - XSA-122: The code handling certain sub-operations of the     HYPERVISOR_xen_version hypercall failed to fully     initialize all fields of structures subsequently copied     back to guest memory. Due to this hypervisor stack     contents were copied into the destination of the     operation, thus becoming visible to the guest.
    (CVE-2015-2045)

  - XSA-121: Emulation routines in the hypervisor dealing     with certain system devices checked whether the access     size by the guest is a supported one. When the access     size is unsupported these routines failed to set the     data to be returned to the guest for read accesses, so     that hypervisor stack contents were copied into the     destination of the operation, thus becoming visible to     the guest. (CVE-2015-2044)

Also fixed :

  - Fully virtualized guest install from network source     failed with 'cannot find guest domain' in XEN.
    (bsc#919341)

Xen was updated to 4.3.4 to fix multiple vulnerabities and non-security bugs.

The following vulnerabilities were fixed :

  - Long latency MMIO mapping operations are not preemptible     (XSA-125 CVE-2015-2752 bnc#922705)

  - Unmediated PCI command register access in qemu (XSA-126     CVE-2015-2756 bnc#922706)

  - Hypervisor memory corruption due to x86 emulator flaw     (bnc#919464 CVE-2015-2151 XSA-123)

  - Information leak through version information hypercall     (bnc#918998 CVE-2015-2045 XSA-122)

  - Information leak via internal x86 system device     emulation (bnc#918995 (CVE-2015-2044 XSA-121)

  - HVM qemu unexpectedly enabling emulated VGA graphics     backends (bnc#919663 CVE-2015-2152 XSA-119)

  - information leakage when guest sets high resolution     (bnc#895528 CVE-2014-3615)

The following non-security bugs were fixed :

  - L3: XEN blktap device intermittently fails to connect     (bnc#919098) 

  - Problems with detecting free loop devices on Xen guest     startup (bnc#903680)

  - xentop reports 'Found interface vif101.0 but domain 101     does not exist.' (bnc#861318) 

  - Intel ixgbe driver assigns rx/tx queues per core     resulting in irq problems on servers with a large amount     of CPU cores (bnc#901488)

  - SLES11 SP3 Xen VT-d igb NIC doesn't work (bnc#910254)

Additional patch for XSA-98 on arm64 HVM qemu unexpectedly enabling emulated VGA graphics backends [XSA-119, CVE-2015-2152] Hypervisor memory corruption due to x86 emulator flaw [XSA-123, CVE-2015-2151] enable building pngs from fig files which is working again, fix oxenstored.service preset preuninstall script, arm: vgic: incorrect rate limiting of guest triggered logging, Information leak via internal x86 system device emulation, Information leak through version information hypercall

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

HVM qemu unexpectedly enabling emulated VGA graphics backends [XSA-119, CVE-2015-2152] Hypervisor memory corruption due to x86 emulator flaw [XSA-123, CVE-2015-2151] Information leak via internal x86 system device emulation, Information leak through version information hypercall

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Additional patch for XSA-98 on arm64 HVM qemu unexpectedly enabling emulated VGA graphics backends [XSA-119, CVE-2015-2152] Hypervisor memory corruption due to x86 emulator flaw [XSA-123, CVE-2015-2151] Information leak via internal x86 system device emulation, Information leak through version information hypercall, fix a typo in xen.fedora.systemd.patch

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote OracleVM system is missing necessary patches to address critical security updates :

  - x86emul: fully ignore segment override for register-only     operations (Jan Beulich) (CVE-2015-2151) This is XSA-123

The remote OracleVM system is missing necessary patches to address critical security updates :

  - x86emul: fully ignore segment override for register-only     operations For ModRM encoded instructions with register     operands we must not overwrite ea.mem.seg (if a - bogus     in that case - segment override was present) as it     aliases with ea.reg. This is CVE-2015-2151 / XSA-123.
    (CVE-2015-2151)

Multiple security issues have been found in the Xen virtualisation solution :

  - CVE-2015-2044     Information leak via x86 system device emulation.

  - CVE-2015-2045     Information leak in the HYPERVISOR_xen_version()     hypercall.

  - CVE-2015-2151     Missing input sanitising in the x86 emulator could     result in information disclosure, denial of service or     potentially privilege escalation.

In addition the Xen developers reported an unfixable limitation in the handling of non-standard PCI devices. Please refer to for further information.

ID	Name	Product	Family	Severity
181020	Oracle Linux 5 : ELSA-2016-0450-1: / kernel (ELSA-2016-04501) (deprecated)	Nessus	Oracle Linux Local Security Checks	high
140019	OracleVM 3.4 : xen (OVMSA-2020-0039) (Bunker Buster) (Foreshadow) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout) (Meltdown) (POODLE) (Spectre)	Nessus	OracleVM Local Security Checks	critical
111992	OracleVM 3.4 : xen (OVMSA-2018-0248) (Bunker Buster) (Foreshadow) (Meltdown) (POODLE) (Spectre)	Nessus	OracleVM Local Security Checks	critical
90380	GLSA-201604-03 : Xen: Multiple vulnerabilities (Venom)	Nessus	Gentoo Local Security Checks	critical
89968	CentOS 5 : kernel (CESA-2016:0450)	Nessus	CentOS Local Security Checks	high
89957	Scientific Linux Security Update : kernel on SL5.x i386/x86_64 (20160315)	Nessus	Scientific Linux Local Security Checks	high
89956	RHEL 5 : kernel (RHSA-2016:0450)	Nessus	Red Hat Local Security Checks	high
89953	Oracle Linux 5 : kernel (ELSA-2016-0450)	Nessus	Oracle Linux Local Security Checks	high
84708	FreeBSD : xen-kernel -- Hypervisor memory corruption due to x86 emulator flaw (83a28417-27e3-11e5-a4a5-002590263bf5)	Nessus	FreeBSD Local Security Checks	high
84333	openSUSE Security Update : xen (openSUSE-2015-434) (Venom)	Nessus	SuSE Local Security Checks	high
84140	OracleVM 3.2 : xen (OVMSA-2015-0068) (POODLE) (Venom)	Nessus	OracleVM Local Security Checks	low
83720	SUSE SLED11 / SLES11 Security Update : Xen (SUSE-SU-2015:0747-1)	Nessus	SuSE Local Security Checks	high
83719	SUSE SLES11 Security Update : Xen (SUSE-SU-2015:0746-1)	Nessus	SuSE Local Security Checks	high
83718	SUSE SLES11 Security Update : Xen (SUSE-SU-2015:0745-1)	Nessus	SuSE Local Security Checks	high
83717	SUSE SLES10 Security Update : Xen (SUSE-SU-2015:0744-1)	Nessus	SuSE Local Security Checks	high
83707	SUSE SLED12 / SLES12 Security Update : Xen (SUSE-SU-2015:0613-1)	Nessus	SuSE Local Security Checks	high
82990	SuSE 11.3 Security Update : Xen (SAT Patch Number 10560)	Nessus	SuSE Local Security Checks	high
82907	openSUSE Security Update : xen (openSUSE-2015-314)	Nessus	SuSE Local Security Checks	high
82054	Fedora 21 : xen-4.4.1-16.fc21 (2015-3944)	Nessus	Fedora Local Security Checks	high
82051	Fedora 20 : xen-4.3.3-12.fc20 (2015-3721)	Nessus	Fedora Local Security Checks	high
81987	Fedora 22 : xen-4.5.0-6.fc22 (2015-3935)	Nessus	Fedora Local Security Checks	high
81874	OracleVM 2.2 : xen (OVMSA-2015-0035)	Nessus	OracleVM Local Security Checks	high
81768	OracleVM 3.2 : xen (OVMSA-2015-0032)	Nessus	OracleVM Local Security Checks	high
81767	OracleVM 3.3 : xen (OVMSA-2015-0031)	Nessus	OracleVM Local Security Checks	high
81748	Debian DSA-3181-1 : xen - security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2015-2151

high

Tenable Plugins

high

critical

critical

critical

high

high

high

high

high

high

low

high

high

high

high

high

high

high

high

high

high

high

high

high

high