xen - denial of service

Fixed packages 1

Vulnerabilities 9

• Unscored —
  CVE-2011-3131

  Xen 4.1.1 and earlier allows local guest OS kernels with control of a PCI[E] device to cause a denial of service (CPU c…

  xen Debian
  Dec 13, 2012
• Unscored —
  CVE-2012-4535

  Xen 3.4 through 4.2, and possibly earlier versions, allows local guest OS administrators to cause a denial of service (…

  xen Debian
  Nov 21, 2012
• Unscored —
  CVE-2012-4537

  Xen 3.4 through 4.2, and possibly earlier versions, does not properly synchronize the p2m and m2p tables when the set_p…

  xen Debian
  Nov 21, 2012
• Unscored —
  CVE-2012-4538

  The HVMOP_pagetable_dying hypercall in Xen 4.0, 4.1, and 4.2 does not properly check the pagetable state when running o…

  xen Debian
  Nov 24, 2012
• Unscored —
  CVE-2012-4539

  Xen 4.0 through 4.2, when running 32-bit x86 PV guests on 64-bit hypervisors, allows local guest OS administrators to c…

  xen Debian
  Nov 21, 2012
• Unscored —
  CVE-2012-5510

  Xen 4.x, when downgrading the grant table version, does not properly remove the status page from the tracking list when…

  xen Debian
  Dec 13, 2012
• Unscored —
  CVE-2012-5513

  The XENMEM_exchange handler in Xen 4.2 and earlier does not properly check the memory address, which allows local PV gu…

  xen Debian
  Dec 13, 2012
• Unscored —
  CVE-2012-5514

  The guest_physmap_mark_populate_on_demand function in Xen 4.2 and earlier does not properly unlock the subject GFNs whe…

  xen Debian
  Dec 13, 2012
• Unscored —
  CVE-2012-5515

  The (1) XENMEM_decrease_reservation, (2) XENMEM_populate_physmap, and (3) XENMEM_exchange hypercalls in Xen 4.2 and ear…

  xen Debian
  Dec 13, 2012