Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Xenstore: Guests can crash xenstored [XSA-414, CVE-2022-42309] Xenstore: Guests can create orphaned Xenstore nodes [XSA-415, CVE-2022-42310] Xenstore: guests c…
x86: unintended memory sharing between guests [XSA-412, CVE-2022-42327] Xenstore: Guests can crash xenstored [XSA-414, CVE-2022-42309] Xenstore: Guests can cre…
French software company Vates VMS has warned of a critical security vulnerability in Xen Orchestra that it said is being actively exploited in the wild. The au…
A critical authentication bypass vulnerability in Xen Orchestra is being actively exploited in attacks that could grant administrator privileges and allow take…
Two flaws in the Xen hypervisor allow a malicious guest virtual machine (VM) to read and write the memory of other VMs on the same host, including dom0. Dom0 i…
x86: Native Branch History Injection [XSA-456, CVE-2024-2201] update to xen 4.17.4, remove patches now included upstream rebase xen.gcc12.fixes.patch x86 HVM h…
Two flaws in the Xen hypervisor can let a malicious virtual machine reach memory that belongs to other parts of the same computer. That includes the powerful m…
oxenstored keeps quota related use counts across domain destruction [XSA-483, CVE-2026-23556] Xenstored DoS via XS_RESET_WATCHES command [XSA-484, CVE-2026-235…
update to xen 4.19.5 Use after free of paging structures in EPT [XSA-480, CVE-2026-23554] Xenstored DoS by unprivileged domain [XSA-481, CVE-2026-23555]
work around debugedit bug to fix aarch64 builds xen-hypervisor %post doesn't load all needed grub2 modules update to xen-4.19.1 which includes Deadlock in x86 …
Numerous security vulnerabilities riddled the XenForo Internet Forum solution, one of which could even allow…Multiple Vulnerabilities Found In XenForo Internet…
update to xen-4.18.1 rebase xen.gcc12.fixes.patch remove patches now included or superceded upstream x86: Register File Data Sampling [XSA-452, CVE-2023-28746]…
This update fixes several security issues and also improves stability. References: - https://bugs.mageia.org/show_bug.cgi?id=32332 - https://xenbits.xen.org/xs…
use OVMF.fd from new edk2-ovmf-xen package as ovmf.bin file built from edk2-ovmf package no longer supports xen (#2170930) ---- x86: Cross-Thread Return Addres…
update to xen-4.15.4 adjust xen.canonicalize.patch remove or adjust patches now included or superceded upstream x86: Multiple speculative security issues [XSA-…
update to xen-4.14.4 ---- frontends vulnerable to backends [XSA-376] (document change only) arm: guest_physmap_remove_page not removing the p2m mappings [XSA-3…
Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in guest-to-host privilege escalation or information disclosure. For th…
Arista Networks released security updates to patch an actively exploited zero-day vulnerability affecting VeloCloud Orchestrator (VCO) On-Prem deployments.…
Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in privilege escalation, information disclosure or denial of service. F…
Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in privilege escalation, information disclosure or denial of service. F…
Fedora has released an update for Xen 4.20.4 addressing multiple security issues, including buffer overflows and deprecated features, which can be installed vi…
Debian has addressed multiple vulnerabilities in the Xen hypervisor that could lead to privilege escalation, information disclosure, or denial of service in it…
A security update for xen has been released, addressing 15 vulnerabilities across various SUSE products, with instructions for installation and the need to reb…
A critical security update for xen addresses 15 vulnerabilities in SUSE products, improving protection against issues like buffer overruns and race conditions,…
