Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Debian · 8 | xen | 4.4.1-9+deb8u10 |
| Debian · 9 | xen | 4.8.1-1+deb9u3 |
Vulnerabilities 13
-
Unscored —
Xen through 4.8.x mishandles page transfer, which allows guest OS users to obtain privileged host OS access, aka XSA-21…
-
Unscored —
The grant-table feature in Xen through 4.8.x provides false mapping information in certain cases of concurrent unmap ca…
-
Unscored —
The grant-table feature in Xen through 4.8.x has a race condition leading to a double free, which allows guest OS users…
-
Unscored —
The shadow-paging feature in Xen through 4.8.x mismanages page references and consequently introduces a race condition,…
-
Unscored —
Xen through 4.8.x does not validate the port numbers of polled event channel ports, which allows guest OS users to caus…
-
Unscored —
Xen through 4.8.x does not validate memory allocations during certain P2M operations, which allows guest OS users to ob…
-
Unscored —
The grant-table feature in Xen through 4.8.x mishandles a GNTMAP_device_map and GNTMAP_host_map mapping, when followed …
-
Unscored —
The grant-table feature in Xen through 4.8.x does not ensure sufficient type counts for a GNTMAP_device_map and GNTMAP_…
-
Unscored —
The grant-table feature in Xen through 4.8.x mishandles MMIO region grant references, which allows guest OS users to ca…
-
Unscored —
Xen allows local OS guest users to cause a denial of service (crash) or possibly obtain sensitive information or gain p…
-
Unscored —
arch/x86/mm.c in Xen allows local PV guest OS users to gain host OS privileges via vectors related to map_grant_ref.
-
Unscored —
Xen maintains the _GTF_{read,writ}ing bits as appropriate, to inform the guest that a grant is in use. A guest is expec…
-
Unscored —
An issue was discovered in Xen 4.4.x through 4.9.x allowing ARM guest OS users to cause a denial of service (prevent ph…