Detections
Analytics
Debian DSA-4812-1 : xen - security update
high Nessus Plugin ID 144322
Language:
Synopsis
The remote Debian host is missing a security-related update.Description
Multiple vulnerabilities have been discovered in the Xen hypervisor :Several security issues affecting Xenstore could result in cross domain access (denial of service, information leaks or privilege escalation) or denial of service against xenstored.
Additional vulnerabilities could result in guest-to-host denial of service.
Solution
Upgrade the xen packages.For the stable distribution (buster), these problems have been fixed in version 4.11.4+57-g41a822c392-2.
See Also
https://security-tracker.debian.org/tracker/source-package/xen
Plugin Details
Severity: High
ID: 144322
File Name: debian_DSA-4812.nasl
Version: 1.7
Type: local
Agent: unix
Family: Debian Local Security Checks
Published: 12/16/2020
Updated: 2/1/2024
Supported Sensors: Agentless Assessment, Continuous Assessment, Frictionless Assessment Agent, Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: High
Score: 7.3
CVSS v2
Risk Factor: High
Base Score: 7.2
Temporal Score: 5.3
Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2020-29479
CVSS v3
Risk Factor: High
Base Score: 8.8
Temporal Score: 7.7
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
CVSS Score Source: CVE-2020-29481
Vulnerability Information
CPE: p-cpe:/a:debian:debian_linux:xen, cpe:/o:debian:debian_linux:10.0
Required KB Items: Host/local_checks_enabled, Host/Debian/release, Host/Debian/dpkg-l
Exploit Ease: No known exploits are available
Patch Publication Date: 12/15/2020
Vulnerability Publication Date: 12/15/2020
Reference Information
CVE: CVE-2020-29479, CVE-2020-29480, CVE-2020-29481, CVE-2020-29482, CVE-2020-29483, CVE-2020-29484, CVE-2020-29485, CVE-2020-29486, CVE-2020-29566, CVE-2020-29570, CVE-2020-29571
DSA: 4812
IAVB: 2020-B-0077-S