VDB
WID-SEC-W-2024-0831
WID-SEC-W-2024-0831
PUBLISHED
CVSS 8.699999809265137 HIGH
Xen ist ein Virtueller-Maschinen-Monitor (VMM), der Hardware (x86, IA-64, PowerPC) für die darauf laufenden Systeme (Domains) paravirtualisiert.
Risk Scores
CVSS v4.0
8.699999809265137
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Gentoo Linux | ||
| Debian Linux | ||
| Citrix Systems Hypervisor 8.2 Cumulative Update 1 Hotfix XS82ECU1062 | ||
| Citrix Systems Hypervisor | ||
| Open Source Xen 4.15.6 | ||
| Citrix Systems Hypervisor <=8.2 Cumulative Update 1 LTSR | ||
| Citrix Systems Hypervisor <=8.2 Cumulative Update 1 | ||
| Citrix Systems Hypervisor 8.2 Cumulative Update 1 <Hotfix XS82ECU1062 | ||
| Open Source Xen 4.18.2 | ||
| Open Source Xen <4.16.6 | ||
| Open Source Xen <4.17.4 | ||
| Citrix Systems XenServer | ||
| Fedora Linux | ||
| Open Source Xen <4.18.2 | ||
| Citrix Systems XenServer 8 | ||
| Open Source Xen 4.16.6 | ||
| Open Source Xen 4.17.4 | ||
| Open Source Xen <4.15.6 |
Timeline
- Apr 9, 2024 CVE Published
- Dec 26, 2024 CVE Updated
References
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0831.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0831 advisory
- https://xenbits.xen.org/xsa/advisory-454.html url
- https://xenbits.xen.org/xsa/advisory-455.html url
- https://bodhi.fedoraproject.org/updates/FEDORA-2024-4357ec611d url
- https://bodhi.fedoraproject.org/updates/FEDORA-2024-a46df5ba2f url
- https://bodhi.fedoraproject.org/updates/FEDORA-2024-a676697123 url
- https://support.citrix.com/article/CTX588044/hotfix-xs82ecu1062-for-citrix-hypervisor-82-cumulative-update-1 url
- https://support.citrix.com/article/CTX633151 url
- https://lists.suse.com/pipermail/sle-security-updates/2024-April/018345.html url
- https://lists.suse.com/pipermail/sle-security-updates/2024-April/018358.html url
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/EMA6GZ7SQAFZG4WQ2CYZR5CTCA4TCPW7/ url
- https://lists.suse.com/pipermail/sle-security-updates/2024-July/018989.html url
- https://lists.suse.com/pipermail/sle-security-updates/2024-July/018986.html url
- https://lists.suse.com/pipermail/sle-security-updates/2024-July/019067.html url
- https://security.gentoo.org/glsa/202409-10 url
- https://lists.debian.org/debian-security-announce/2024/msg00252.html url