What it is about

Xen ist ein Virtueller-Maschinen-Monitor (VMM), der Hardware (x86, IA-64, PowerPC) für die darauf laufenden Systeme (Domains) paravirtualisiert. Ein lokaler Angreifer kann mehrere Schwachstellen in Xen ausnutzen, um erweiterte Privilegien zu erlangen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.

Under what conditions?

Only with access to the device or an account on it. Often the second step after a phishing email.

What can happen in the worst case

An attacker could use the vulnerability to

• erweiterte Privilegien zu erlangen
• Daten zu manipulieren
• vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen

Am I affected?

Affected according to the BSI:

• Debian Linux
• Fedora Linux
• SUSE Linux
• Oracle Linux
• Open Source Xen >=3.2
• Open Source Xen >=3.3
• Open Source Xen Arm
• Open Source Xen >=4.15
• Ubuntu Linux

The installed version is usually shown under “Help → About” or in the device’s admin interface.

What helps?

Update to at least:

• Open Source Xen >=3.2
• Open Source Xen >=3.3
• Open Source Xen >=4.15

Is the vulnerability already being exploited?

None of the CVEs is in the CISA catalogue of exploited vulnerabilities. That does not mean there are no attacks, only that none are documented.