SB2021112343 - Fedora 35 update for xen
Published: November 23, 2021
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 7 secuirty vulnerabilities.
1) Buffer overflow (CVE-ID: CVE-2021-28706)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a boundary error. A remote authenticated attacker can trigger memory corruption and cause a denial of service condition on the target system.
2) Input validation error (CVE-ID: CVE-2021-28704)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to an error in XENMEM_decrease_reservation operation. A remote authenticated attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.
3) Input validation error (CVE-ID: CVE-2021-28707)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to an error in XENMEM_populate_physmap operation. A remote authenticated attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.
4) Input validation error (CVE-ID: CVE-2021-28708)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to an error in ENMEM_decrease_reservation operation. A remote authenticated attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.
5) Input validation error (CVE-ID: CVE-2021-28705)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient validation of user-supplied input in page removal code path. A remote authenticated attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.
6) Input validation error (CVE-ID: CVE-2021-28709)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient validation of user-supplied input in insertion of new pages code path. A remote authenticated attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.
7) Permissions, Privileges, and Access Controls (CVE-ID: CVE-2021-28710)
The vulnerability allows a remote attacker to escalate privileges on the system.
The vulnerability exists due to application does not properly impose security restrictions in certain VT-d IOMMUs, which leads to security restrictions bypass and privilege escalation.
Remediation
Install update from vendor's website.