| Errata ID | 218 | 
|---|---|
| Date | 2014-10-13 | 
| Source package | xen-4.1 | 
| Fixed in version | 4.1.3-16.41.201410101644 | 
| Description | There were multiple security issues discovered in Xen: * Information leak through outs instruction emulation (CVE-2013-4368) * use-after-free in xc_cpupool_getinfo() (CVE-2014-1950) * Denial of service in HVMOP_set_mem_access() (CVE-2014-2599) * Denial of service in HVMOP_set_mem_type() (CVE-2014-3124) * Hypervisor heap contents leaked to guests (CVE-2014-4021) * Denial of service in HVMOP_track_dirty_vram() (CVE-2014-7154) * Missing privilege level checks in x86 HLT, LGDT, LIDT, and LMSW emulation (CVE-2014-7155) * Missing privilege level checks in x86 emulation of software interrupts (CVE-2014-7156) * Improper MSR range used for x2APIC emulation (CVE-2014-7188)  | 
				
| Additional notes | |
| CVE ID | CVE-2013-4368 CVE-2014-1950 CVE-2014-2599 CVE-2014-3124 CVE-2014-4021 CVE-2014-7154 CVE-2014-7155 CVE-2014-7156 CVE-2014-7188  | 
  
| UCS Bug number | #34115 | 
