Skip to content
OpenAdvisories
Unscored DSA-2636-1 6 CVEs

xen - several

Published Mar 1, 2013 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 xen 4.0.1-5.7

Vulnerabilities 6

  • Unscored —
    CVE-2012-2625

    The PyGrub boot loader in Xen unstable before changeset 25589:60f09d1ab1fe, 4.2.x, and 4.1.x allows local para-virtuali…

    xen Debian
  • Unscored —
    CVE-2012-4544

    The PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk (1) before or (2) afte…

    xen Debian
  • Unscored —
    CVE-2012-5511

    Stack-based buffer overflow in the dirty video RAM tracking functionality in Xen 3.4 through 4.1 allows local HVM guest…

    xen Debian
  • Unscored —
    CVE-2012-5634

    Xen 4.2.x, 4.1.x, and 4.0, when using Intel VT-d for PCI passthrough, does not properly configure VT-d when supporting …

    xen Debian
  • Unscored —
    CVE-2012-6333

    Multiple HVM control operations in Xen 3.4 through 4.2 allow local HVM guest OS administrators to cause a denial of ser…

    xen Debian
  • Unscored —
    CVE-2013-0153

    The AMD IOMMU support in Xen 4.2.x, 4.1.x, 3.3, and other versions, when using AMD-Vi for PCI passthrough, uses the sam…

    xen Debian