Five new undisclosed Xen vulnerabilities
xenbits.xen.org
Five new undisclosed Xen vulnerabilities
1–10 of 50 posts
Re: Five new undisclosed Xen vulnerabilities
#2Just received a message from Rackspace cloud regarding theses, it seems like they will have to reboot all instances.
Re: Five new undisclosed Xen vulnerabilities
#3Just received a message from Rackspace cloud regarding theses, it seems like they will have to reboot all instances. See https://community.rackspace.com/general/f/53/t/4978
See ya later uptime...
04:49:58 up 659 days
Re: Five new undisclosed Xen vulnerabilities
#4Just received a message from Rackspace cloud regarding theses, it seems like they will have to reboot all instances. See https://community.rackspace.com/general/f/53/t/4978
prgmr did reboots yesterday
Re: Five new undisclosed Xen vulnerabilities
#5Just received a message from Rackspace cloud regarding theses, it seems like they will have to reboot all instances. See https://community.rackspace.com/general/f/53/t/4978
See ya later uptime... 04:49:58 up 659 days
See ya later uptime... 04:49:58 up 659 days
your server is vulnerable to a number of Xen security vulnerabilities: http://xenbits.xen.org/xsa/
Including this one from Oct 1, 2014 that allows guests to read up to 3KB of memory from the hypervisor or other guests:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7188
http://threatpost.com/serious-hypervisor-bug-fix-causes-unex...
Re: Five new undisclosed Xen vulnerabilities
#6Re: Five new undisclosed Xen vulnerabilities
#7AWS uses xen too, right?
Re: Five new undisclosed Xen vulnerabilities
#8Xen's hypervisor would seem to be a great place to implement live patching like KSplice/kGraft/Kpatch does for the Linux kernel. Presumably that stuff still works on KVM host machines with live guests.
Re: Five new undisclosed Xen vulnerabilities
#9AWS uses xen too, right?
yes part of the reason I moved away from AWS years ago. Now it doesn't even matter since I am deploying to Docker anyways.