Ubuntu: (Multiple Advisories) (CVE-2020-11743): Xen vulnerabilities
Description
An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of service because of a bad error path in GNTTABOP_map_grant. Grant table operations are expected to return 0 for success, and a negative number for errors. Some misplaced brackets cause one error path to return 1 instead of a negative value. The grant table code in Linux treats this condition as success, and proceeds with incorrectly initialised state. A buggy or malicious guest can construct its grant table in such a way that, when a backend domain tries to map a grant, it hits the incorrect error path. This will crash a Linux based dom0 or backend domain.
Solution(s)
- ubuntu-upgrade-libxendevicemodel1
- ubuntu-upgrade-libxenevtchn1
- ubuntu-upgrade-libxengnttab1
- ubuntu-upgrade-libxenmisc4-11
- ubuntu-upgrade-xen-hypervisor-4-11-amd64
- ubuntu-upgrade-xen-hypervisor-4-11-arm64
- ubuntu-upgrade-xen-hypervisor-4-11-armhf
- ubuntu-upgrade-xen-utils-4-11
- ubuntu-upgrade-xen-utils-common
- ubuntu-upgrade-xenstore-utils
- Lightweight Endpoint Agent
- Live Dashboards
- Real Risk Prioritization
- IT-Integrated Remediation Projects
- Cloud, Virtual, and Container Assessment
- Integrated Threat Feeds
- Easy-to-Use RESTful API
- Automation-Assisted Patching
- Automated Containment
With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.
– Scott Cheney, Manager of Information Security, Sierra View Medical Center