Test ID:	1.3.6.1.4.1.25623.1.0.704232
Category:	Debian Local Security Checks
Title:	Debian: Security Advisory (DSA-4232-1)
Summary:	The remote host is missing an update for the Debian 'xen' package(s) announced via the DSA-4232-1 advisory.
Description:	Summary: The remote host is missing an update for the Debian 'xen' package(s) announced via the DSA-4232-1 advisory. Vulnerability Insight: This update provides mitigations for the lazy FPU vulnerability affecting a range of Intel CPUs, which could result in leaking CPU register states belonging to another vCPU previously scheduled on the same CPU. For additional information please refer to [link moved to references] For the stable distribution (stretch), this problem has been fixed in version 4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u8. We recommend that you upgrade your xen packages. For the detailed security status of xen please refer to its security tracker page at: [link moved to references] Affected Software/OS: 'xen' package(s) on Debian 9. Solution: Please install the updated package(s). CVSS Score: 4.7 CVSS Vector: AV:L/AC:M/Au:N/C:C/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2018-3665 BugTraq ID: 104460 http://www.securityfocus.com/bid/104460 https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0 https://nvidia.custhelp.com/app/answers/detail/a_id/4787 https://security.netapp.com/advisory/ntap-20181016-0001/ https://security.paloaltonetworks.com/CVE-2018-3665 https://support.citrix.com/article/CTX235745 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00145.html https://www.synology.com/support/security/Synology_SA_18_31 Debian Security Information: DSA-4232 (Google Search) https://www.debian.org/security/2018/dsa-4232 FreeBSD Security Advisory: FreeBSD-SA-18:07 https://security.FreeBSD.org/advisories/FreeBSD-SA-18:07.lazyfpu.asc https://www.oracle.com/security-alerts/cpujul2020.html https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html RedHat Security Advisories: RHSA-2018:1852 https://access.redhat.com/errata/RHSA-2018:1852 RedHat Security Advisories: RHSA-2018:1944 https://access.redhat.com/errata/RHSA-2018:1944 RedHat Security Advisories: RHSA-2018:2164 https://access.redhat.com/errata/RHSA-2018:2164 RedHat Security Advisories: RHSA-2018:2165 https://access.redhat.com/errata/RHSA-2018:2165 RedHat Security Advisories: RHSA-2019:1170 https://access.redhat.com/errata/RHSA-2019:1170 RedHat Security Advisories: RHSA-2019:1190 https://access.redhat.com/errata/RHSA-2019:1190 http://www.securitytracker.com/id/1041124 http://www.securitytracker.com/id/1041125 https://usn.ubuntu.com/3696-1/ https://usn.ubuntu.com/3696-2/ https://usn.ubuntu.com/3698-1/ https://usn.ubuntu.com/3698-2/
Copyright	Copyright (C) 2018 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.