Zercurity data services
  • Expand groupSummary
  • Applications (0)
  • Packages (48)
  • System updates (0)
  • Operating systems (0)

CVE-2019-18423

Description
An issue was discovered in Xen through 4.12.x allowing ARM guest OS users to cause a denial of service via a XENMEM_add_to_physmap hypercall. p2m->max_mapped_gfn is used by the functions p2m_resolve_translation_fault() and p2m_get_entry() to sanity check guest physical frame. The rest of the code in the two functions will assume that there is a valid root table and check that with BUG_ON(). The function p2m_get_root_pointer() will ignore the unused top bits of a guest physical frame. This means that the function p2m_set_entry() will alias the frame. However, p2m->max_mapped_gfn will be updated using the original frame. It would be possible to set p2m->max_mapped_gfn high enough to cover a frame that would lead p2m_get_root_pointer() to return NULL in p2m_get_entry() and p2m_resolve_translation_fault(). Additionally, the sanity check on p2m->max_mapped_gfn is off-by-one allowing "highest mapped + 1" to be considered valid. However, p2m_get_root_pointer() will return NULL. The problem could be triggered with a specially crafted hypercall XENMEM_add_to_physmap{, _batch} followed by an access to an address (via hypercall or direct access) that passes the sanity check but cause p2m_get_root_pointer() to return NULL. A malicious guest administrator may cause a hypervisor crash, resulting in a Denial of Service (DoS). Xen version 4.8 and newer are vulnerable. Only Arm systems are vulnerable. x86 systems are not affected.
  • Risk: 88
CVSSv3
    CVSSv2

      Packages

      NameTypeArchSizeRisk
      libxenstore3.0
      libxenstore3.0_4.8.5+shim4.10.2+xsa282-1+deb9u11_i386.deb
      libxen-4.8
      libxen-4.8_4.8.5+shim4.10.2+xsa282-1+deb9u11_amd64.deb
      xen-utils-4.8
      xen-utils-4.8_4.8.5+shim4.10.2+xsa282-1+deb9u11_amd64.deb
      libxenstore3.0
      libxenstore3.0_4.8.5+shim4.10.2+xsa282-1+deb9u11_amd64.deb
      xen-system-amd64
      xen-system-amd64_4.8.5+shim4.10.2+xsa282-1+deb9u11_amd64.deb
      libxen-dev
      libxen-dev_4.8.5+shim4.10.2+xsa282-1+deb9u11_amd64.deb
      xenstore-utils
      xenstore-utils_4.8.5+shim4.10.2+xsa282-1+deb9u11_i386.deb
      libxen-dev
      libxen-dev_4.8.5+shim4.10.2+xsa282-1+deb9u11_i386.deb
      xen-system-amd64
      xen-system-amd64_4.8.5+shim4.10.2+xsa282-1+deb9u11_i386.deb
      xen-hypervisor-4.8-amd64
      xen-hypervisor-4.8-amd64_4.8.5+shim4.10.2+xsa282-1+deb9u11_amd64.deb
      libxen-4.8
      libxen-4.8_4.8.5+shim4.10.2+xsa282-1+deb9u11_i386.deb
      xen-hypervisor-4.8-amd64
      xen-hypervisor-4.8-amd64_4.8.5+shim4.10.2+xsa282-1+deb9u11_i386.deb
      xenstore-utils
      xenstore-utils_4.8.5+shim4.10.2+xsa282-1+deb9u11_amd64.deb
      xen-utils-common
      xen-utils-common_4.8.5+shim4.10.2+xsa282-1+deb9u11_all.deb
      xen-utils-4.8
      xen-utils-4.8_4.8.5+shim4.10.2+xsa282-1+deb9u11_i386.deb
      libxendevicemodel1
      libxendevicemodel1_4.11.1+92-g6c33308a8d-2_i386.deb
      xenstore-utils
      xenstore-utils_4.11.1+92-g6c33308a8d-2_i386.deb
      xen-system-amd64
      xen-system-amd64_4.11.1+92-g6c33308a8d-2_amd64.deb
      xen-hypervisor-4.11-amd64
      xen-hypervisor-4.11-amd64_4.11.1+92-g6c33308a8d-2_amd64.deb
      xen-utils-common
      xen-utils-common_4.11.1+92-g6c33308a8d-2_amd64.deb
      libxenevtchn1
      libxenevtchn1_4.11.1+92-g6c33308a8d-2_i386.deb
      xen-utils-common
      xen-utils-common_4.11.1+92-g6c33308a8d-2_i386.deb
      libxen-dev
      libxen-dev_4.11.1+92-g6c33308a8d-2_amd64.deb
      libxenforeignmemory1
      libxenforeignmemory1_4.11.1+92-g6c33308a8d-2_i386.deb
      libxen-dev
      libxen-dev_4.11.1+92-g6c33308a8d-2_i386.deb
      libxenstore3.0
      libxenstore3.0_4.11.1+92-g6c33308a8d-2_i386.deb
      xen-utils-4.11
      xen-utils-4.11_4.11.1+92-g6c33308a8d-2_amd64.deb
      libxencall1
      libxencall1_4.11.1+92-g6c33308a8d-2_i386.deb
      xen-doc
      xen-doc_4.11.1+92-g6c33308a8d-2_i386.deb
      libxenmisc4.11
      libxenmisc4.11_4.11.1+92-g6c33308a8d-2_amd64.deb
      libxenforeignmemory1
      libxenforeignmemory1_4.11.1+92-g6c33308a8d-2_amd64.deb
      libxenevtchn1
      libxenevtchn1_4.11.1+92-g6c33308a8d-2_amd64.deb
      libxenmisc4.11
      libxenmisc4.11_4.11.1+92-g6c33308a8d-2_i386.deb
      libxentoolcore1
      libxentoolcore1_4.11.1+92-g6c33308a8d-2_amd64.deb
      libxentoollog1
      libxentoollog1_4.11.1+92-g6c33308a8d-2_amd64.deb
      libxendevicemodel1
      libxendevicemodel1_4.11.1+92-g6c33308a8d-2_amd64.deb
      xenstore-utils
      xenstore-utils_4.11.1+92-g6c33308a8d-2_amd64.deb
      xen-hypervisor-common
      xen-hypervisor-common_4.11.1+92-g6c33308a8d-2_all.deb
      xen-utils-4.11
      xen-utils-4.11_4.11.1+92-g6c33308a8d-2_i386.deb
      libxentoollog1
      libxentoollog1_4.11.1+92-g6c33308a8d-2_i386.deb
      xen-doc
      xen-doc_4.11.1+92-g6c33308a8d-2_amd64.deb
      xen-hypervisor-4.11-amd64
      xen-hypervisor-4.11-amd64_4.11.1+92-g6c33308a8d-2_i386.deb
      libxencall1
      libxencall1_4.11.1+92-g6c33308a8d-2_amd64.deb
      libxenstore3.0
      libxenstore3.0_4.11.1+92-g6c33308a8d-2_amd64.deb
      libxentoolcore1
      libxentoolcore1_4.11.1+92-g6c33308a8d-2_i386.deb
      libxengnttab1
      libxengnttab1_4.11.1+92-g6c33308a8d-2_i386.deb
      xen-system-amd64
      xen-system-amd64_4.11.1+92-g6c33308a8d-2_i386.deb
      libxengnttab1
      libxengnttab1_4.11.1+92-g6c33308a8d-2_amd64.deb

      Raw Object

      {
        "uuid": "11142955-5151-7c42-465a-47066770555a",
        "name": "CVE-2019-18423",
        "description": "An issue was discovered in Xen through 4.12.x allowing ARM guest OS users to cause a denial of service via a XENMEM_add_to_physmap hypercall. p2m->max_mapped_gfn is used by the functions p2m_resolve_translation_fault() and p2m_get_entry() to sanity check guest physical frame. The rest of the code in the two functions will assume that there is a valid root table and check that with BUG_ON(). The function p2m_get_root_pointer() will ignore the unused top bits of a guest physical frame. This means that the function p2m_set_entry() will alias the frame. However, p2m->max_mapped_gfn will be updated using the original frame. It would be possible to set p2m->max_mapped_gfn high enough to cover a frame that would lead p2m_get_root_pointer() to return NULL in p2m_get_entry() and p2m_resolve_translation_fault(). Additionally, the sanity check on p2m->max_mapped_gfn is off-by-one allowing \"highest mapped + 1\" to be considered valid. However, p2m_get_root_pointer() will return NULL. The problem could be triggered with a specially crafted hypercall XENMEM_add_to_physmap{, _batch} followed by an access to an address (via hypercall or direct access) that passes the sanity check but cause p2m_get_root_pointer() to return NULL. A malicious guest administrator may cause a hypervisor crash, resulting in a Denial of Service (DoS). Xen version 4.8 and newer are vulnerable. Only Arm systems are vulnerable. x86 systems are not affected.",
        "cvss": null,
        "score": 8.5,
        "severity": "HIGH",
        "cvss3": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
        "score3": 8.8,
        "severity3": "HIGH",
        "applications": [],
        "packages": [
          {
            "uuid": "61dd0892-5f98-90ab-721a-f24ab691839e",
            "sha256": "b2d3ce8f5048a5791a8cee39606568e233116dad83a5ea7dbc8508c2f902c99a",
            "sha1": "4c1e6bb0281d3f06d780532c9f05310004eb43d2",
            "md5": "4ba6e69b8edbbc84dd104aea5466da2e",
            "name": "libxenstore3.0",
            "version": "4.8.5+shim4.10.2+xsa282-1+deb9u11",
            "filename": "libxenstore3.0_4.8.5+shim4.10.2+xsa282-1+deb9u11_i386.deb",
            "source": "DSA",
            "sid": "DSA-4602-1",
            "self": "https://data.zercurity.com/v1/package/b2d3ce8f5048a5791a8cee39606568e233116dad83a5ea7dbc8508c2f902c99a"
          },
          {
            "uuid": "a10b4b61-b660-7538-0c88-cc2ea99b1a39",
            "sha256": "b3c6a96c9f6fbcb3d8b20dd81ad8ace42ada1c9dcd81a06f74e6a63bffceb727",
            "sha1": "26724416f5e201062ad56cd22d3768816cbd714c",
            "md5": "aa6990fc381a31b426ba740bdeb97370",
            "name": "libxen-4.8",
            "version": "4.8.5+shim4.10.2+xsa282-1+deb9u11",
            "filename": "libxen-4.8_4.8.5+shim4.10.2+xsa282-1+deb9u11_amd64.deb",
            "source": "DSA",
            "sid": "DSA-4602-1",
            "self": "https://data.zercurity.com/v1/package/b3c6a96c9f6fbcb3d8b20dd81ad8ace42ada1c9dcd81a06f74e6a63bffceb727"
          },
          {
            "uuid": "d69c3613-e8e5-cea3-6f12-11769303c2ec",
            "sha256": "a75523c097c6f401fa341b912ff26e0dacac56e176931ef1df04de7fc4745b37",
            "sha1": "88068deb6303050351c4b4117b623f03e498f439",
            "md5": "6b5a1323c0ef78f77ad38f14c33bb6a6",
            "name": "xen-utils-4.8",
            "version": "4.8.5+shim4.10.2+xsa282-1+deb9u11",
            "filename": "xen-utils-4.8_4.8.5+shim4.10.2+xsa282-1+deb9u11_amd64.deb",
            "source": "DSA",
            "sid": "DSA-4602-1",
            "self": "https://data.zercurity.com/v1/package/a75523c097c6f401fa341b912ff26e0dacac56e176931ef1df04de7fc4745b37"
          },
          {
            "uuid": "8171f1e7-38c1-ac67-e51d-5cc02fda90d0",
            "sha256": "a1c63d71f68dee29cd9d864c9b3920e86098bf08691fcdfb1d761c95821531df",
            "sha1": "4984202f127408884d9f6652050fc979d966950b",
            "md5": "ece8df254d3091b89f16a08b35f80dff",
            "name": "libxenstore3.0",
            "version": "4.8.5+shim4.10.2+xsa282-1+deb9u11",
            "filename": "libxenstore3.0_4.8.5+shim4.10.2+xsa282-1+deb9u11_amd64.deb",
            "source": "DSA",
            "sid": "DSA-4602-1",
            "self": "https://data.zercurity.com/v1/package/a1c63d71f68dee29cd9d864c9b3920e86098bf08691fcdfb1d761c95821531df"
          },
          {
            "uuid": "d59a8abd-caaf-4289-0625-114d1bcdc963",
            "sha256": "9e2cf01bcd6c371f725eb6bddf4a3b64376d445b8983baa71a0d73a77d204573",
            "sha1": "8e1220a0c5a9881c775c23d894520738a053e6b7",
            "md5": "d19c046ec15eecb46ae9a0448fd88030",
            "name": "xen-system-amd64",
            "version": "4.8.5+shim4.10.2+xsa282-1+deb9u11",
            "filename": "xen-system-amd64_4.8.5+shim4.10.2+xsa282-1+deb9u11_amd64.deb",
            "source": "DSA",
            "sid": "DSA-4602-1",
            "self": "https://data.zercurity.com/v1/package/9e2cf01bcd6c371f725eb6bddf4a3b64376d445b8983baa71a0d73a77d204573"
          },
          {
            "uuid": "04b1702f-47eb-2cae-f1ca-e0a6f6cf9edc",
            "sha256": "de4b4c9ecb2a149c9371ba72eec5ab0b4a70a06d25abd867d51bf0f4cdf19e5e",
            "sha1": "53c1dbba69d63adb19698eb10c7007c8b0206eb2",
            "md5": "1629f750ce522149498205fe605fd6f3",
            "name": "libxen-dev",
            "version": "4.8.5+shim4.10.2+xsa282-1+deb9u11",
            "filename": "libxen-dev_4.8.5+shim4.10.2+xsa282-1+deb9u11_amd64.deb",
            "source": "DSA",
            "sid": "DSA-4602-1",
            "self": "https://data.zercurity.com/v1/package/de4b4c9ecb2a149c9371ba72eec5ab0b4a70a06d25abd867d51bf0f4cdf19e5e"
          },
          {
            "uuid": "f5fccc4a-c29a-58bb-cfdc-4d4037b0d636",
            "sha256": "0138e5e7140e37c79535668e442f8dbc9db63405d0df6e92972991a79dd2e008",
            "sha1": "091aa290ce6de2b1d59cc7aa91c9a30bc40866e5",
            "md5": "55aa222bdfc692b13788fbc79aa5d7d1",
            "name": "xenstore-utils",
            "version": "4.8.5+shim4.10.2+xsa282-1+deb9u11",
            "filename": "xenstore-utils_4.8.5+shim4.10.2+xsa282-1+deb9u11_i386.deb",
            "source": "DSA",
            "sid": "DSA-4602-1",
            "self": "https://data.zercurity.com/v1/package/0138e5e7140e37c79535668e442f8dbc9db63405d0df6e92972991a79dd2e008"
          },
          {
            "uuid": "45fc2402-05f4-0d17-4cfe-ac3d5b77e3aa",
            "sha256": "4996361eef8b33766dfe0bcb1ab6e6001aa1a152812c23d1be9334f254cb7eeb",
            "sha1": "e7f0a9f1c6dd4d15ef101d597443ba0bceb69155",
            "md5": "3eb38c0088a4728cec35f7f97e5001a0",
            "name": "libxen-dev",
            "version": "4.8.5+shim4.10.2+xsa282-1+deb9u11",
            "filename": "libxen-dev_4.8.5+shim4.10.2+xsa282-1+deb9u11_i386.deb",
            "source": "DSA",
            "sid": "DSA-4602-1",
            "self": "https://data.zercurity.com/v1/package/4996361eef8b33766dfe0bcb1ab6e6001aa1a152812c23d1be9334f254cb7eeb"
          },
          {
            "uuid": "fdf86755-9451-8870-d1df-381fd3ab07d5",
            "sha256": "3f004471a877637e4b0abdc7f4886ae3dea605e324fde6de350bea99729ea7f6",
            "sha1": "a82d28cd63d861683d4ce3d629690741a861ac81",
            "md5": "4ac7f4e0706238fc718566e7bb7cc409",
            "name": "xen-system-amd64",
            "version": "4.8.5+shim4.10.2+xsa282-1+deb9u11",
            "filename": "xen-system-amd64_4.8.5+shim4.10.2+xsa282-1+deb9u11_i386.deb",
            "source": "DSA",
            "sid": "DSA-4602-1",
            "self": "https://data.zercurity.com/v1/package/3f004471a877637e4b0abdc7f4886ae3dea605e324fde6de350bea99729ea7f6"
          },
          {
            "uuid": "264b16f8-73c8-bc20-58b8-5779d5563823",
            "sha256": "d824474d508ce4cf75dea2ad18ce1bd84c85f7c61d76e081513552636c739cc2",
            "sha1": "ea065a2a425619d8db107c72e70aa2cf917a5d4f",
            "md5": "b43f70544da172ef6372a0b8d6e0b868",
            "name": "xen-hypervisor-4.8-amd64",
            "version": "4.8.5+shim4.10.2+xsa282-1+deb9u11",
            "filename": "xen-hypervisor-4.8-amd64_4.8.5+shim4.10.2+xsa282-1+deb9u11_amd64.deb",
            "source": "DSA",
            "sid": "DSA-4602-1",
            "self": "https://data.zercurity.com/v1/package/d824474d508ce4cf75dea2ad18ce1bd84c85f7c61d76e081513552636c739cc2"
          },
          {
            "uuid": "d5955b63-86ec-2666-d6b0-10925ddf6551",
            "sha256": "88ff46f987fa7bfffe148d4637af9d3bde25d7cdb6fa5f861d1005c1e110ef06",
            "sha1": "e2c62de4ad7241d13302a138897a1fd2fd96553e",
            "md5": "1c7a31d2dfeaf9595d455cccec755437",
            "name": "libxen-4.8",
            "version": "4.8.5+shim4.10.2+xsa282-1+deb9u11",
            "filename": "libxen-4.8_4.8.5+shim4.10.2+xsa282-1+deb9u11_i386.deb",
            "source": "DSA",
            "sid": "DSA-4602-1",
            "self": "https://data.zercurity.com/v1/package/88ff46f987fa7bfffe148d4637af9d3bde25d7cdb6fa5f861d1005c1e110ef06"
          },
          {
            "uuid": "5f45ae4b-60e4-e23e-d2d0-2bb8bc86fabc",
            "sha256": "2732f4d2cc00cc0ec787ca8db783a14473a3ecac277f681ba3447a3f31c709c2",
            "sha1": "f09ecb41f45b088d5a32430dcc97b8bd476a907f",
            "md5": "2c3f41461cd52074adfb25333ae6417e",
            "name": "xen-hypervisor-4.8-amd64",
            "version": "4.8.5+shim4.10.2+xsa282-1+deb9u11",
            "filename": "xen-hypervisor-4.8-amd64_4.8.5+shim4.10.2+xsa282-1+deb9u11_i386.deb",
            "source": "DSA",
            "sid": "DSA-4602-1",
            "self": "https://data.zercurity.com/v1/package/2732f4d2cc00cc0ec787ca8db783a14473a3ecac277f681ba3447a3f31c709c2"
          },
          {
            "uuid": "cde86c18-0a1e-8c5a-b1f2-e2d66fb35705",
            "sha256": "10bbf91c48e2106c8acf79ba364fc374d4f42bad4c45732a2c0a52b01e3654c4",
            "sha1": "efe5b45229b188c57b72cbeedb098528b9966c61",
            "md5": "168ab7d36bfbae60e44a527b729e0be6",
            "name": "xenstore-utils",
            "version": "4.8.5+shim4.10.2+xsa282-1+deb9u11",
            "filename": "xenstore-utils_4.8.5+shim4.10.2+xsa282-1+deb9u11_amd64.deb",
            "source": "DSA",
            "sid": "DSA-4602-1",
            "self": "https://data.zercurity.com/v1/package/10bbf91c48e2106c8acf79ba364fc374d4f42bad4c45732a2c0a52b01e3654c4"
          },
          {
            "uuid": "e07a35e3-9955-33f2-34d8-38cb6d3d9b1d",
            "sha256": "bd8069595f816582a61c11b29c17af8b24638832ef1d676819db77791ee856d0",
            "sha1": "eb78b17c2f6466c0553feb3eea5efcf1734bf3de",
            "md5": "166c56e16ab0847af7580b10060de50e",
            "name": "xen-utils-common",
            "version": "4.8.5+shim4.10.2+xsa282-1+deb9u11",
            "filename": "xen-utils-common_4.8.5+shim4.10.2+xsa282-1+deb9u11_all.deb",
            "source": "DSA",
            "sid": "DSA-4602-1",
            "self": "https://data.zercurity.com/v1/package/bd8069595f816582a61c11b29c17af8b24638832ef1d676819db77791ee856d0"
          },
          {
            "uuid": "0fd92e6f-2966-c543-d632-cebdfe52d9f0",
            "sha256": "a172b23c792f5b71a5c0815b41c11dbe94b80b6085a7b4ebd634b38518ac78ef",
            "sha1": "b09d392b8eb23fe5b04c49c3677fb5f128ada015",
            "md5": "edc4aa84561486eb74606677df3041eb",
            "name": "xen-utils-4.8",
            "version": "4.8.5+shim4.10.2+xsa282-1+deb9u11",
            "filename": "xen-utils-4.8_4.8.5+shim4.10.2+xsa282-1+deb9u11_i386.deb",
            "source": "DSA",
            "sid": "DSA-4602-1",
            "self": "https://data.zercurity.com/v1/package/a172b23c792f5b71a5c0815b41c11dbe94b80b6085a7b4ebd634b38518ac78ef"
          },
          {
            "uuid": "eec1163a-f8d8-d7ef-99de-e2bf3f3a05c8",
            "sha256": "70edbf3e15182958380e7103d191715ced336f2536f29fc67c9936da862bdc9e",
            "sha1": "fbcc7966ed3943d6e71e80dd866d8db2d5dc97a1",
            "md5": "355b699077d8311a093251c975e8eab2",
            "name": "libxendevicemodel1",
            "version": "4.11.1+92-g6c33308a8d-2",
            "filename": "libxendevicemodel1_4.11.1+92-g6c33308a8d-2_i386.deb",
            "source": "DSA",
            "sid": "DSA-4602-1",
            "self": "https://data.zercurity.com/v1/package/70edbf3e15182958380e7103d191715ced336f2536f29fc67c9936da862bdc9e"
          },
          {
            "uuid": "28d54d44-2c92-0e92-d8c3-477fe2bd253a",
            "sha256": "83d617dce196ba8cb342ea8d04bdc59d3c9338a6b016fd7144e4d147b5936bd3",
            "sha1": "1c78d347028cd1646b1e5d5025ebe2f68407a31b",
            "md5": "ee2c83a45080d704108eb646be7bbfa2",
            "name": "xenstore-utils",
            "version": "4.11.1+92-g6c33308a8d-2",
            "filename": "xenstore-utils_4.11.1+92-g6c33308a8d-2_i386.deb",
            "source": "DSA",
            "sid": "DSA-4602-1",
            "self": "https://data.zercurity.com/v1/package/83d617dce196ba8cb342ea8d04bdc59d3c9338a6b016fd7144e4d147b5936bd3"
          },
          {
            "uuid": "c320ac2f-d120-9cd4-746a-9a1f8258b966",
            "sha256": "af3295548c9ccb615e20f30a2a15ae6531b98096bad7c527b7fbd5e4344e31e6",
            "sha1": "1d1c7801ea2a9f1bbdd1918d7c2395269681c708",
            "md5": "3a4acbcaf074c6b8be8e3b9ed9d39c04",
            "name": "xen-system-amd64",
            "version": "4.11.1+92-g6c33308a8d-2",
            "filename": "xen-system-amd64_4.11.1+92-g6c33308a8d-2_amd64.deb",
            "source": "DSA",
            "sid": "DSA-4602-1",
            "self": "https://data.zercurity.com/v1/package/af3295548c9ccb615e20f30a2a15ae6531b98096bad7c527b7fbd5e4344e31e6"
          },
          {
            "uuid": "144c43fb-a3ab-2d3f-218d-ab704ca0ed9d",
            "sha256": "56572da9e4c6f259a1835f18fc7db5dace2c70ea9c6d544da2c84bb042523f6b",
            "sha1": "b1036924b876c4a5830ffacfa8456502fd5923d1",
            "md5": "2a6261c9f2061958fc1f7910b4512657",
            "name": "xen-hypervisor-4.11-amd64",
            "version": "4.11.1+92-g6c33308a8d-2",
            "filename": "xen-hypervisor-4.11-amd64_4.11.1+92-g6c33308a8d-2_amd64.deb",
            "source": "DSA",
            "sid": "DSA-4602-1",
            "self": "https://data.zercurity.com/v1/package/56572da9e4c6f259a1835f18fc7db5dace2c70ea9c6d544da2c84bb042523f6b"
          },
          {
            "uuid": "00d43f91-fa6f-b0fc-aacf-e64263f4bcab",
            "sha256": "c48220ad9065268c79b8e26add503e098c3ba9c5fec77d808b3744b7b3fd0485",
            "sha1": "3911829cca6ffed651877a482ab9d040746903cb",
            "md5": "82d3f39aadf172b677e49befde14e1ee",
            "name": "xen-utils-common",
            "version": "4.11.1+92-g6c33308a8d-2",
            "filename": "xen-utils-common_4.11.1+92-g6c33308a8d-2_amd64.deb",
            "source": "DSA",
            "sid": "DSA-4602-1",
            "self": "https://data.zercurity.com/v1/package/c48220ad9065268c79b8e26add503e098c3ba9c5fec77d808b3744b7b3fd0485"
          },
          {
            "uuid": "53559c3f-62be-cd22-ccc8-9ec4a9ebff4a",
            "sha256": "e34211a83af630c7e37d4cd0e8653fe2cb5c08ac03431ed75c4435f42c92bb2b",
            "sha1": "2201fbaefcd1f046022fd47233c6cd17a49041cd",
            "md5": "6f32cfe25ffa5e6e4c390ec9642a032b",
            "name": "libxenevtchn1",
            "version": "4.11.1+92-g6c33308a8d-2",
            "filename": "libxenevtchn1_4.11.1+92-g6c33308a8d-2_i386.deb",
            "source": "DSA",
            "sid": "DSA-4602-1",
            "self": "https://data.zercurity.com/v1/package/e34211a83af630c7e37d4cd0e8653fe2cb5c08ac03431ed75c4435f42c92bb2b"
          },
          {
            "uuid": "c5706816-d533-03ea-a08c-1fcddfe74884",
            "sha256": "2685abb45d319e122546dd54040f21b55a80f5d1a3b4538f9f9f12328f698077",
            "sha1": "96e823c4e5c0be251a9adfc5b138e89ad7977745",
            "md5": "d961a2ea4849ffbb9386028a4c6f7331",
            "name": "xen-utils-common",
            "version": "4.11.1+92-g6c33308a8d-2",
            "filename": "xen-utils-common_4.11.1+92-g6c33308a8d-2_i386.deb",
            "source": "DSA",
            "sid": "DSA-4602-1",
            "self": "https://data.zercurity.com/v1/package/2685abb45d319e122546dd54040f21b55a80f5d1a3b4538f9f9f12328f698077"
          },
          {
            "uuid": "08a33251-b479-d147-0119-7e3f020d94dc",
            "sha256": "a815832b80c9f11af4246fff05af7f01c304e8eda4da1ef00515a448fe0098bd",
            "sha1": "17078af6b17cd02a1b5bc0f8b71ccca514708946",
            "md5": "f5000be1cf1d5dd09c55c25b6989f7e1",
            "name": "libxen-dev",
            "version": "4.11.1+92-g6c33308a8d-2",
            "filename": "libxen-dev_4.11.1+92-g6c33308a8d-2_amd64.deb",
            "source": "DSA",
            "sid": "DSA-4602-1",
            "self": "https://data.zercurity.com/v1/package/a815832b80c9f11af4246fff05af7f01c304e8eda4da1ef00515a448fe0098bd"
          },
          {
            "uuid": "515d3a04-3e6c-6ba2-f79a-322534fcf8e1",
            "sha256": "2264b38ec283ad4fd1a3133f67f48dc7211b1d6d16ca8bf18c1cacc820e3cdfc",
            "sha1": "a2c8ab6b907d41c12049ef7cd167752cedde081d",
            "md5": "5a151c6141ce0e79272ec9f62cca1265",
            "name": "libxenforeignmemory1",
            "version": "4.11.1+92-g6c33308a8d-2",
            "filename": "libxenforeignmemory1_4.11.1+92-g6c33308a8d-2_i386.deb",
            "source": "DSA",
            "sid": "DSA-4602-1",
            "self": "https://data.zercurity.com/v1/package/2264b38ec283ad4fd1a3133f67f48dc7211b1d6d16ca8bf18c1cacc820e3cdfc"
          },
          {
            "uuid": "cc1fe0ef-34fc-9a6a-6ac8-bc6022ca68d0",
            "sha256": "713a9c5617210bc59947ccf4767b521d6aea986b39a85fb51504b6a1c82eae4f",
            "sha1": "65990118e0e640510a8aedba960ac633edd90099",
            "md5": "9822015523714242bd85f36ed0bb2922",
            "name": "libxen-dev",
            "version": "4.11.1+92-g6c33308a8d-2",
            "filename": "libxen-dev_4.11.1+92-g6c33308a8d-2_i386.deb",
            "source": "DSA",
            "sid": "DSA-4602-1",
            "self": "https://data.zercurity.com/v1/package/713a9c5617210bc59947ccf4767b521d6aea986b39a85fb51504b6a1c82eae4f"
          },
          {
            "uuid": "facf5315-8979-73c5-8334-00eccc9a5277",
            "sha256": "601e850d5e7be19eece35bb534ddda7b17a19a0548b1e4c6f76dd551ac650ee8",
            "sha1": "47a7e89acd7906c7eff68781bdac9049ea1b1e7e",
            "md5": "8ccbc12686522745047e599b8baa7594",
            "name": "libxenstore3.0",
            "version": "4.11.1+92-g6c33308a8d-2",
            "filename": "libxenstore3.0_4.11.1+92-g6c33308a8d-2_i386.deb",
            "source": "DSA",
            "sid": "DSA-4602-1",
            "self": "https://data.zercurity.com/v1/package/601e850d5e7be19eece35bb534ddda7b17a19a0548b1e4c6f76dd551ac650ee8"
          },
          {
            "uuid": "6614e7e3-54b5-dd77-d7a7-9a9e86d24c1d",
            "sha256": "6a8059653c78ce3d91cc3ea1e11e112f7141cb20178dc8c8e210548634b25cf3",
            "sha1": "df1f6e65d703966e1ade9b9d347cb8169ccf0f8e",
            "md5": "d5b26c247b0b859392cc7eee1bcb2f88",
            "name": "xen-utils-4.11",
            "version": "4.11.1+92-g6c33308a8d-2",
            "filename": "xen-utils-4.11_4.11.1+92-g6c33308a8d-2_amd64.deb",
            "source": "DSA",
            "sid": "DSA-4602-1",
            "self": "https://data.zercurity.com/v1/package/6a8059653c78ce3d91cc3ea1e11e112f7141cb20178dc8c8e210548634b25cf3"
          },
          {
            "uuid": "429c3fb1-9f91-a66c-83dd-e3c381fb5fe5",
            "sha256": "3d964ef5ff66c8061f471df65ebd1778a0663013089ec7ddb241a9580aa6a2f8",
            "sha1": "6ccac5fb0b119e8b1607448112cb2b884e04caaf",
            "md5": "818fa3f2ba681a62f7d40f0787ddd5b3",
            "name": "libxencall1",
            "version": "4.11.1+92-g6c33308a8d-2",
            "filename": "libxencall1_4.11.1+92-g6c33308a8d-2_i386.deb",
            "source": "DSA",
            "sid": "DSA-4602-1",
            "self": "https://data.zercurity.com/v1/package/3d964ef5ff66c8061f471df65ebd1778a0663013089ec7ddb241a9580aa6a2f8"
          },
          {
            "uuid": "7207abf2-3d61-399c-8804-785ab546c4a5",
            "sha256": "3ba9b30446ff5d1e8bcaabfa9526b348b2266885625be51d41a003a6455185c1",
            "sha1": "23de5edee0203e04c5bc0325da66eaa6afcc3f1d",
            "md5": "aa7f88ebfc4097f7b3dd1e5ad76f8ac7",
            "name": "xen-doc",
            "version": "4.11.1+92-g6c33308a8d-2",
            "filename": "xen-doc_4.11.1+92-g6c33308a8d-2_i386.deb",
            "source": "DSA",
            "sid": "DSA-4602-1",
            "self": "https://data.zercurity.com/v1/package/3ba9b30446ff5d1e8bcaabfa9526b348b2266885625be51d41a003a6455185c1"
          },
          {
            "uuid": "dc731473-e6e5-0d39-5fe9-9cddfb643dbe",
            "sha256": "6ea38164356fd77c75cf2fab5fd6e254928eff605b556c8f5b1730e3ec601d21",
            "sha1": "bebecd9166d2d9e19700fded5c2d62bf8d1feac3",
            "md5": "5f79ca5c32d06ff5f07ab8cea7d81a6e",
            "name": "libxenmisc4.11",
            "version": "4.11.1+92-g6c33308a8d-2",
            "filename": "libxenmisc4.11_4.11.1+92-g6c33308a8d-2_amd64.deb",
            "source": "DSA",
            "sid": "DSA-4602-1",
            "self": "https://data.zercurity.com/v1/package/6ea38164356fd77c75cf2fab5fd6e254928eff605b556c8f5b1730e3ec601d21"
          },
          {
            "uuid": "a6febadd-7246-58d6-9f73-0e6fd37f237d",
            "sha256": "d7014f14e2461e1bf256f91fffdfe71ad052d45d003834f2ae10c13bf6545c88",
            "sha1": "13f1c0169070e73ee4819010233b60c5ab580a2c",
            "md5": "30f6fe40a0cff83cf4c1b14d2941e36f",
            "name": "libxenforeignmemory1",
            "version": "4.11.1+92-g6c33308a8d-2",
            "filename": "libxenforeignmemory1_4.11.1+92-g6c33308a8d-2_amd64.deb",
            "source": "DSA",
            "sid": "DSA-4602-1",
            "self": "https://data.zercurity.com/v1/package/d7014f14e2461e1bf256f91fffdfe71ad052d45d003834f2ae10c13bf6545c88"
          },
          {
            "uuid": "858e6fd6-5c3a-7632-183c-93d105ccd37d",
            "sha256": "04597b7e2f54e1604a204aa77ab52dae1016fcd88bfed3dc8a006b15334ef11a",
            "sha1": "573306adb23b551db2e62e3f5dd65991fcb86d01",
            "md5": "c4325be5925d34b57e4e201ac6ed6542",
            "name": "libxenevtchn1",
            "version": "4.11.1+92-g6c33308a8d-2",
            "filename": "libxenevtchn1_4.11.1+92-g6c33308a8d-2_amd64.deb",
            "source": "DSA",
            "sid": "DSA-4602-1",
            "self": "https://data.zercurity.com/v1/package/04597b7e2f54e1604a204aa77ab52dae1016fcd88bfed3dc8a006b15334ef11a"
          },
          {
            "uuid": "2e1eee62-cf92-93a0-23d2-9551b172c15d",
            "sha256": "1409676f39c62e3807b565695b315a44ff12a410581234badace0a59a292e965",
            "sha1": "146657c395f3a1f8f9243eb8040aba9afc40100f",
            "md5": "62e474e5e10217c075c2bd90b1135429",
            "name": "libxenmisc4.11",
            "version": "4.11.1+92-g6c33308a8d-2",
            "filename": "libxenmisc4.11_4.11.1+92-g6c33308a8d-2_i386.deb",
            "source": "DSA",
            "sid": "DSA-4602-1",
            "self": "https://data.zercurity.com/v1/package/1409676f39c62e3807b565695b315a44ff12a410581234badace0a59a292e965"
          },
          {
            "uuid": "bb71ca5b-c90e-d993-1b50-10f86139eaf6",
            "sha256": "cc49d90c4402e7e79e5bb54b1eb5ab2d2797de70a7a8a194b80c4b7d48908649",
            "sha1": "2c21af3cda68dfe150d890e97fe0166974ff5448",
            "md5": "9226003bbff5cdb9f0be900db1ef9ca3",
            "name": "libxentoolcore1",
            "version": "4.11.1+92-g6c33308a8d-2",
            "filename": "libxentoolcore1_4.11.1+92-g6c33308a8d-2_amd64.deb",
            "source": "DSA",
            "sid": "DSA-4602-1",
            "self": "https://data.zercurity.com/v1/package/cc49d90c4402e7e79e5bb54b1eb5ab2d2797de70a7a8a194b80c4b7d48908649"
          },
          {
            "uuid": "02866f0f-a65a-5575-78d8-52918e99ddcf",
            "sha256": "ebf044b0966c75467e6871105082fc9540f013046c049ce766720febde2ba475",
            "sha1": "09e58d1e2e2d9ea2503c0c225143521cf3c5101c",
            "md5": "2c3cfd13b31a02c09687b4c4e4cc9e69",
            "name": "libxentoollog1",
            "version": "4.11.1+92-g6c33308a8d-2",
            "filename": "libxentoollog1_4.11.1+92-g6c33308a8d-2_amd64.deb",
            "source": "DSA",
            "sid": "DSA-4602-1",
            "self": "https://data.zercurity.com/v1/package/ebf044b0966c75467e6871105082fc9540f013046c049ce766720febde2ba475"
          },
          {
            "uuid": "11533448-b7c4-a50e-edd2-b1abe1e80973",
            "sha256": "6d384fdaf81251178fa2ca8f32dba51ce0a2f2d801391fe2e16472b0a45b4220",
            "sha1": "44e0eeffd731f57778f322eff7076a85f64a0d4a",
            "md5": "a8115a1cde3928208a0d0fb30dcfd439",
            "name": "libxendevicemodel1",
            "version": "4.11.1+92-g6c33308a8d-2",
            "filename": "libxendevicemodel1_4.11.1+92-g6c33308a8d-2_amd64.deb",
            "source": "DSA",
            "sid": "DSA-4602-1",
            "self": "https://data.zercurity.com/v1/package/6d384fdaf81251178fa2ca8f32dba51ce0a2f2d801391fe2e16472b0a45b4220"
          },
          {
            "uuid": "1d172460-c707-176a-45a2-24eb87cd4caa",
            "sha256": "2b572babe27a04074dd7b315a849838ce52b501b9ecf36846c7cf6f977276420",
            "sha1": "5d6c436c29fb677a88477d201f9a37659be09350",
            "md5": "853512483b53469ab3ee1dd18296aec3",
            "name": "xenstore-utils",
            "version": "4.11.1+92-g6c33308a8d-2",
            "filename": "xenstore-utils_4.11.1+92-g6c33308a8d-2_amd64.deb",
            "source": "DSA",
            "sid": "DSA-4602-1",
            "self": "https://data.zercurity.com/v1/package/2b572babe27a04074dd7b315a849838ce52b501b9ecf36846c7cf6f977276420"
          },
          {
            "uuid": "ee980d0e-76fa-c493-34af-a65ab3146c93",
            "sha256": "ce74e660d26c56800177ee8aa5fc451ef6e07c836ec25e742533098ce4ce2b00",
            "sha1": "78fb66a7383e8dca3c6084c95f314923015d58b0",
            "md5": "b648974976026acb5423c0d714f991d7",
            "name": "xen-hypervisor-common",
            "version": "4.11.1+92-g6c33308a8d-2",
            "filename": "xen-hypervisor-common_4.11.1+92-g6c33308a8d-2_all.deb",
            "source": "DSA",
            "sid": "DSA-4602-1",
            "self": "https://data.zercurity.com/v1/package/ce74e660d26c56800177ee8aa5fc451ef6e07c836ec25e742533098ce4ce2b00"
          },
          {
            "uuid": "d575adaf-1c3f-cad5-2191-ca359a92e9bd",
            "sha256": "95decb43150fd7e60640c4e3010019153a3b6398c14b32a83602d2bc55fdbe4a",
            "sha1": "bb1ad3044a6aa4303761d075b9c42a3087f61255",
            "md5": "7765ae2b7db2109598abf05320fe50d9",
            "name": "xen-utils-4.11",
            "version": "4.11.1+92-g6c33308a8d-2",
            "filename": "xen-utils-4.11_4.11.1+92-g6c33308a8d-2_i386.deb",
            "source": "DSA",
            "sid": "DSA-4602-1",
            "self": "https://data.zercurity.com/v1/package/95decb43150fd7e60640c4e3010019153a3b6398c14b32a83602d2bc55fdbe4a"
          },
          {
            "uuid": "a425ae95-bf42-52c8-b8a7-d5dafb63ff09",
            "sha256": "36ccc4b52b228f0e5d6ef8d12790a81e6d047cbf48404e255f28f5068a2ff727",
            "sha1": "30c443f8e697bf80aa39be4ad8e3c8b7540a4cba",
            "md5": "14af7baa17743f05309b72c808b8f460",
            "name": "libxentoollog1",
            "version": "4.11.1+92-g6c33308a8d-2",
            "filename": "libxentoollog1_4.11.1+92-g6c33308a8d-2_i386.deb",
            "source": "DSA",
            "sid": "DSA-4602-1",
            "self": "https://data.zercurity.com/v1/package/36ccc4b52b228f0e5d6ef8d12790a81e6d047cbf48404e255f28f5068a2ff727"
          },
          {
            "uuid": "8a960f5e-d27d-9167-7d88-b1c9bdcfb4da",
            "sha256": "0d5e6039f7fbd535535fd25334de9cab6c3904f8cf484dcfbd9ee5ad0cfd7d69",
            "sha1": "769d5167f9e5a569346b04fc31ff4c40174ec47d",
            "md5": "fd56d09ab8bfc15ad4653f081de7019d",
            "name": "xen-doc",
            "version": "4.11.1+92-g6c33308a8d-2",
            "filename": "xen-doc_4.11.1+92-g6c33308a8d-2_amd64.deb",
            "source": "DSA",
            "sid": "DSA-4602-1",
            "self": "https://data.zercurity.com/v1/package/0d5e6039f7fbd535535fd25334de9cab6c3904f8cf484dcfbd9ee5ad0cfd7d69"
          },
          {
            "uuid": "a2375f07-b11b-cdbd-c9f8-9e012d0b2ebb",
            "sha256": "eec380d7e8d6cbee3c0703bcfec00efdd4977beb24e43b37ede0970c105394f1",
            "sha1": "a5306fbd86609baef79feed15f521b9ae96f6dfa",
            "md5": "c774576c9d1d7c21ec9bf0276a438ec4",
            "name": "xen-hypervisor-4.11-amd64",
            "version": "4.11.1+92-g6c33308a8d-2",
            "filename": "xen-hypervisor-4.11-amd64_4.11.1+92-g6c33308a8d-2_i386.deb",
            "source": "DSA",
            "sid": "DSA-4602-1",
            "self": "https://data.zercurity.com/v1/package/eec380d7e8d6cbee3c0703bcfec00efdd4977beb24e43b37ede0970c105394f1"
          },
          {
            "uuid": "5157bc06-81ed-842b-bf4f-5a4d1c1f40c7",
            "sha256": "084b080d13020c71b427369ba066956548a0575239392f577e97f777dac571eb",
            "sha1": "ca44c729475e370e64d7ce8ac2940ca091b38f03",
            "md5": "5388cce1da862df33c09c2a02d9fb822",
            "name": "libxencall1",
            "version": "4.11.1+92-g6c33308a8d-2",
            "filename": "libxencall1_4.11.1+92-g6c33308a8d-2_amd64.deb",
            "source": "DSA",
            "sid": "DSA-4602-1",
            "self": "https://data.zercurity.com/v1/package/084b080d13020c71b427369ba066956548a0575239392f577e97f777dac571eb"
          },
          {
            "uuid": "061af552-0857-59d7-cb75-132d30f971f9",
            "sha256": "cedc6ae8300e60f3aeb2ffe0ce984eadbc7616773055b98a03fa9e0a9c85ea5d",
            "sha1": "649cd4cd263d896fc5cb4f5bbd3b364a36028ec8",
            "md5": "763d3192869dbb4da434a80febd30b94",
            "name": "libxenstore3.0",
            "version": "4.11.1+92-g6c33308a8d-2",
            "filename": "libxenstore3.0_4.11.1+92-g6c33308a8d-2_amd64.deb",
            "source": "DSA",
            "sid": "DSA-4602-1",
            "self": "https://data.zercurity.com/v1/package/cedc6ae8300e60f3aeb2ffe0ce984eadbc7616773055b98a03fa9e0a9c85ea5d"
          },
          {
            "uuid": "b97515d7-21eb-59f3-6dbc-62a8876c8969",
            "sha256": "955be7907c30e3c93f7682abfb52c1f96f6712276b5301c9849cfef6bd3dc230",
            "sha1": "d0139444f518fa025098bd01c693437f85bf3230",
            "md5": "21a49e460cc193389430790bf363c7dd",
            "name": "libxentoolcore1",
            "version": "4.11.1+92-g6c33308a8d-2",
            "filename": "libxentoolcore1_4.11.1+92-g6c33308a8d-2_i386.deb",
            "source": "DSA",
            "sid": "DSA-4602-1",
            "self": "https://data.zercurity.com/v1/package/955be7907c30e3c93f7682abfb52c1f96f6712276b5301c9849cfef6bd3dc230"
          },
          {
            "uuid": "f8d25d15-9edf-8126-80ed-56cb565b624d",
            "sha256": "6e52a94b1cceb402eaba77e28897bcbfa73e8d950ab71effce7e6219acbaa445",
            "sha1": "a062201ce71ddee26009715c72fe9dd72df1f4b0",
            "md5": "0e1e6879f03bdfb048cbeff07927bf21",
            "name": "libxengnttab1",
            "version": "4.11.1+92-g6c33308a8d-2",
            "filename": "libxengnttab1_4.11.1+92-g6c33308a8d-2_i386.deb",
            "source": "DSA",
            "sid": "DSA-4602-1",
            "self": "https://data.zercurity.com/v1/package/6e52a94b1cceb402eaba77e28897bcbfa73e8d950ab71effce7e6219acbaa445"
          },
          {
            "uuid": "0ccf5ff1-14af-1540-ecde-bd8983ad7077",
            "sha256": "7538996ad200961a052abd7c37745806073e9d88e1721c0736eb4e08df83a9b6",
            "sha1": "6af4f2cd79234946f53953702adfb14f8d3e6f6c",
            "md5": "484cdfbd695453a9c686de91551b141a",
            "name": "xen-system-amd64",
            "version": "4.11.1+92-g6c33308a8d-2",
            "filename": "xen-system-amd64_4.11.1+92-g6c33308a8d-2_i386.deb",
            "source": "DSA",
            "sid": "DSA-4602-1",
            "self": "https://data.zercurity.com/v1/package/7538996ad200961a052abd7c37745806073e9d88e1721c0736eb4e08df83a9b6"
          },
          {
            "uuid": "61b296a2-7424-f279-0def-917ebe022c08",
            "sha256": "6b81b8ed54188a476a6e7da4d638e3f5c6c81eb09a9d1bfa40a56abfae6aa0ca",
            "sha1": "3767b63205ff0d480fbd5dbeebcb6143ed1c2557",
            "md5": "5e0b7052d5f9611c7402444850ee9fc4",
            "name": "libxengnttab1",
            "version": "4.11.1+92-g6c33308a8d-2",
            "filename": "libxengnttab1_4.11.1+92-g6c33308a8d-2_amd64.deb",
            "source": "DSA",
            "sid": "DSA-4602-1",
            "self": "https://data.zercurity.com/v1/package/6b81b8ed54188a476a6e7da4d638e3f5c6c81eb09a9d1bfa40a56abfae6aa0ca"
          }
        ],
        "updates": [],
        "os": [],
        "risk": 88,
        "created_at": "2019-10-31T14:15:00+00:00",
        "updated_at": "2020-08-24T17:37:00+00:00",
        "deleted_at": null
      }