Detections
Analytics
Scientific Linux Security Update : xen on SL5.x i386/x86_64
medium Nessus Plugin ID 60480
Language:
Synopsis
The remote Scientific Linux host is missing one or more security updates.Description
It was discovered that the hypervisor's para-virtualized framebuffer (PVFB) backend failed to validate the frontend's framebuffer description properly. This could allow a privileged user in the unprivileged domain (DomU) to cause a denial of service, or, possibly, elevate privileges to the privileged domain (Dom0). (CVE-2008-1952)A flaw was found in the QEMU block format auto-detection, when running fully-virtualized guests and using Qemu images written on removable media (USB storage, 3.5' disks). Privileged users of such fully-virtualized guests (DomU), with a raw-formatted disk image, were able to write a header to that disk image describing another format.
This could allow such guests to read arbitrary files in their hypervisor's host (Dom0). (CVE-2008-1945)
Additionally, the following bug is addressed in this update :
- The qcow-create command terminated when invoked due to glibc bounds checking on the realpath() function.
Solution
Update the affected xen, xen-devel and / or xen-libs packages.See Also
Plugin Details
Severity: Medium
ID: 60480
File Name: sl_20081001_xen_on_SL5_x.nasl
Version: 1.6
Type: local
Agent: unix
Published: 8/1/2012
Updated: 1/14/2021
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3.7
CVSS v2
Risk Factor: Medium
Base Score: 4.9
Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:N/A:N
Vulnerability Information
CPE: x-cpe:/o:fermilab:scientific_linux
Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu
Patch Publication Date: 10/1/2008
Reference Information
CVE: CVE-2008-1945, CVE-2008-1952