Huawei has noticed a vulnerability disclosed by Xen. The floppy disk controller (FDC) of QEMU (used in Xen V4.5.x and earlier) has a buffer overflow vulnerability. This vulnerability allows an attacker to escape out of the virtual machine, execute code on the physical host with full privilege, or gain access to the local network and other virtual machines, affecting data centers (CVE No.: CVE-2015-3456).
Some versions of Huawei FusionCompute products are affected by the vulnerability. Huawei has released fixed version and delivered Security Advisory. The link of the Security Advisory is:
Huawei adheres to protecting the ultimate interests of users with best efforts and the principle of responsible disclosure and deal with product security issues through our response mechanism. Please report to Huawei PSIRT at email@example.com if you find any security vulnerability of Huawei products.