Linux · Ubuntu · Package update · December 12, 2017

libxenstore3.0 4.9.2-0ubuntu1: libxenstore3.0 4.9.2-0ubuntu1 for Ubuntu 18.04.6 LTS (bionic)

libxenstore3.0 4.9.2-0ubuntu1, released December 12, 2017, fixes 17 CVEs in libxenstore3.0. None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported.

RoutineUnsupported product
CVEs closed
17
None rated Critical
Exploited
0
None reported
Highest CVSS
n/a
No CVSS score published
Highest EPSS
0.0283
86th percentile

Priority of the 17 CVEs

Patch now 0 Urgent 0 High 0 Routine 17

Fixed package versions

ProductReleaseFixed in
libxenstore3.0Ubuntu 18.04.6 LTS (bionic)4.9.2-0ubuntu1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Routine CVE-2017-15597 libxen-4.9: An issue was discovered in Xen through 4.9.xn/a 0.0283 None reported
Routine CVE-2017-15595 libxen-4.9: An issue was discovered in Xen through 4.9.x allowing x86 PV guest OS users to cause a denial of service (unbounded r...n/a 0.0156 None reported
Routine CVE-2017-17044 libxen-4.9: An issue was discovered in Xen through 4.9.x allowing HVM guest OS users to cause a denial of service (infinite loop...n/a 0.0044 None reported
Routine CVE-2017-15592 libxen-4.9: An issue was discovered in Xen through 4.9.x allowing x86 HVM guest OS users to cause a denial of service (hypervisor...n/a 0.0043 None reported
Routine CVE-2017-17045 libxen-4.9: An issue was discovered in Xen through 4.9.x allowing HVM guest OS users to gain privileges on the host OS, obtain se...n/a 0.0043 None reported
Routine CVE-2017-15590 libxen-4.9: An issue was discovered in Xen through 4.9.x allowing x86 guest OS users to cause a denial of service (hypervisor cra...n/a 0.0041 None reported
Routine CVE-2017-15589 libxen-4.9: An issue was discovered in Xen through 4.9.x allowing x86 HVM guest OS users to obtain sensitive information from the...n/a 0.0041 None reported
Routine CVE-2017-15593 xen-hypervisor-4.8-arm64: An issue was discovered in Xen through 4.9.x allowing x86 PV guest OS users to cause a denial of service (memory leak...n/a 0.0039 None reported
Routine CVE-2017-15594 libxen-4.9: An issue was discovered in Xen through 4.9.x allowing x86 SVM PV guest OS users to cause a denial of service (hypervi...n/a 0.0038 None reported
Routine CVE-2017-15596 libxen-4.9: An issue was discovered in Xen 4.4.x through 4.9.x allowing ARM guest OS users to cause a denial of service (prevent...n/a 0.0037 None reported
Routine CVE-2017-17046 libxen-4.9: An issue was discovered in Xen through 4.9.x on the ARM platform allowing guest OS users to obtain sensitive informat...n/a 0.0036 None reported
Routine CVE-2017-17565 libxen-4.9: An issue was discovered in Xen through 4.9.x allowing PV guest OS users to cause a denial of service (host OS crash)...n/a 0.0036 None reported
Routine CVE-2017-17566 libxen-4.9: An issue was discovered in Xen through 4.9.x allowing PV guest OS users to cause a denial of service (host OS crash)...n/a 0.0036 None reported
Routine CVE-2017-17563 libxen-4.9: An issue was discovered in Xen through 4.9.x allowing guest OS users to cause a denial of service (host OS crash) or...n/a 0.0035 None reported
Routine CVE-2017-17564 libxen-4.9: An issue was discovered in Xen through 4.9.x allowing guest OS users to cause a denial of service (host OS crash) or...n/a 0.0035 None reported
Routine CVE-2017-15588 libxen-4.9: An issue was discovered in Xen through 4.9.x allowing x86 PV guest OS users to execute arbitrary code on the host OS...n/a 0.0033 None reported
Routine CVE-2017-15591 libxen-4.9: An issue was discovered in Xen 4.5.x through 4.9.x allowing attackers (who control a stub domain kernel or tool stack...n/a 0.0033 None reported
Showing 1 to 17 of 17 1

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.