Understanding The Xen XSA-108 Security Issue

[phoronix]

Phoronix: Understanding The Xen XSA-108 Security Issue

Many Phoronix readers likely heard of Amazon Web Services, Rackspace, and other hosting providers rebooting their clouds in recent days as a result of a Xen security issue. If you're not yet familiar with this XSA-108 security issue, our friends at Xen Orchestra have a nice write-up covering the issue...

http://www.phoronix.com/vr.php?view=MTgwMjQ

[paulez]

The big difference with Heatbleed is that you can only read one area of memory with this vulnerability, with Heartbleed you could read a different area at each heartbeat.

The scope is so much smaller.