The remote host is affected by the vulnerability described in GLSA-201710-17 (Xen: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Xen. Please review the       referenced CVE identifiers for details.
  Impact :

    A local attacker could escalate privileges, cause a Denial of Service       condition, obtain sensitive information, or have other unspecified       impacts.
  Workaround :

    There is no known workaround at this time.

xen: various flaws (#1463247) blkif responses leak backend stack data [XSA-216] page transfer may allow PV guest to elevate privilege [XSA-217] Races in the grant table unmap code [XSA-218] x86:
insufficient reference counts during shadow emulation [XSA-219] x86:
PKRU and BND* leakage between vCPU-s [XSA-220] stale P2M mappings due to insufficient error checking [XSA-222] ARM guest disabling interrupt may crash Xen [XSA-223] grant table operations mishandle reference counts [XSA-224] arm: vgic: Out-of-bound access when sending SGIs [XSA-225] NULL pointer deref in event channel poll [XSA-221] (#1463231)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of Citrix XenServer installed on the remote host is missing a security hotfix. It is, therefore, affected by multiple vulnerabilities :

  - A flaw exists that causes grant table operations to fail     due to improper handling of reference counts. An     unauthenticated, remote attacker can exploit this to     have an unspecified impact.

  - An information disclosure vulnerability exists due to     blkif responses leaking stack data. An unauthenticated,     remote attacker can exploit this to disclose potentially     sensitive information.

  - A NULL pointer dereference flaw exists in the event     channel poll that allows an unauthenticated, remote     attacker to cause a denial of service condition.

  - A flaw exists in shadow emulation due to insufficient     reference counts. An unauthenticated, remote attacker     can exploit this to have an unspecified impact.

  - A race condition exists in the grant table unmap code     that allows an unauthenticated, remote attacker to have     an unspecified impact.

  - An unspecified flaw exists in page transfers that allows     a local attacker on the PV guest to gain elevated     privileges.

  - A flaw exists that is triggered by stale P2M mappings     due to insufficient error checking. An unauthenticated,     remote attacker can exploit this to have an unspecified     impact.

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2017-0142 for details.

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2018-0248 for details.

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2020-0039 for details.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
103910	GLSA-201710-17 : Xen: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2017/10/18	2025/11/18	critical
101183	Fedora 24 : xen (2017-b3bdaf58bc)	Nessus	Fedora Local Security Checks	2017/7/3	2025/12/12	critical
101205	Citrix XenServer Multiple Vulnerabilities (CTX224740)	Nessus	Misc.	2017/7/3	2020/4/24	critical
102835	OracleVM 3.4 : xen (OVMSA-2017-0142)	Nessus	OracleVM Local Security Checks	2017/8/30	2025/11/25	critical
111992	OracleVM 3.4 : xen (OVMSA-2018-0248) (Bunker Buster) (Foreshadow) (Meltdown) (POODLE) (Spectre)	Nessus	OracleVM Local Security Checks	2018/8/20	2026/1/9	critical
140019	OracleVM 3.4 : xen (OVMSA-2020-0039) (Bunker Buster) (Foreshadow) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout) (Meltdown) (POODLE) (Spectre)	Nessus	OracleVM Local Security Checks	2020/8/28	2026/1/9	critical

検出

プラグインの検索

critical

critical

critical

critical

critical

critical