Skip to content
OpenAdvisories
Unscored DSA-3286-1 7 CVEs

xen - security update

Published Jun 13, 2015 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 7 xen 4.1.4-3+deb7u8
Debian · 8 xen 4.4.1-9+deb8u1

Vulnerabilities 7

  • Unscored —

    Heap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to execute arbitrary code by sending…

  • Unscored —

    Xen 3.3.x through 4.5.x does not properly restrict write access to the host MSI message data field, which allows local …

  • Unscored —

    Xen 3.3.x through 4.5.x does not properly restrict access to PCI MSI mask bits, which allows local x86 HVM guest users …

  • Unscored —

    Xen 3.3.x through 4.5.x enables logging for PCI MSI-X pass-through error messages, which allows local x86 HVM guests to…

  • Unscored —

    QEMU does not properly restrict write access to the PCI config space for certain PCI pass-through devices, which might …

  • Unscored —

    GNTTABOP_swap_grant_ref in Xen 4.2 through 4.5 does not check the grant table operation version, which allows local gue…

  • Unscored —

    The compat_iret function in Xen 3.1 through 4.5 iterates the wrong way through a loop, which allows local 32-bit PV gue…