489 results · Feed
-
Unscored —
The mod_l2_entry function in arch/x86/mm.c in Xen 3.4 through 4.6.x does not properly validate level 2 page table entri…
-
Unscored —
libxl in Xen 4.1.x through 4.6.x does not properly handle the readonly flag on disks when using the qemu-xen device mod…
-
Unscored —
The xenmem_add_to_physmap_one function in arch/arm/mm.c in Xen 4.5.x, 4.4.x, and earlier does not limit the number of p…
-
Unscored —CVE-2015-3214 Public exploit
The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not distinguish between rea…
-
Unscored —
Heap-based buffer overflow in the IDE subsystem in QEMU, as used in Xen 4.5.x and earlier, when the container has a CDR…
-
Unscored —
Use-after-free vulnerability in QEMU in Xen 4.5.x and earlier does not completely unplug emulated block devices, which …
-
Unscored —CVE-2015-5165 EPSS 13%
The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allow…
-
Unscored —
Stack-based buffer overflow in the xl command line utility in Xen 4.1.x through 4.5.x allows local guest administrators…
-
Unscored —
GNTTABOP_swap_grant_ref in Xen 4.2 through 4.5 does not check the grant table operation version, which allows local gue…
-
Unscored —
The compat_iret function in Xen 3.1 through 4.5 iterates the wrong way through a loop, which allows local 32-bit PV gue…
-
Unscored —
Heap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to execute arbitrary code by sending…
-
Unscored —
Xen 3.3.x through 4.5.x enables logging for PCI MSI-X pass-through error messages, which allows local x86 HVM guests to…
-
Unscored —
Xen 3.3.x through 4.5.x does not properly restrict access to PCI MSI mask bits, which allows local x86 HVM guest users …
-
Unscored —
Xen 3.3.x through 4.5.x does not properly restrict write access to the host MSI message data field, which allows local …
-
Unscored —
QEMU does not properly restrict write access to the PCI config space for certain PCI pass-through devices, which might …
-
Unscored —
The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a…
-
Unscored —
Xen 4.2.x through 4.5.x does not initialize certain fields, which allows certain remote service domains to obtain sensi…
-
Unscored —
Xen 4.3.x, 4.4.x, and 4.5.x, when using toolstack disaggregation, allows remote domains with partial management control…
-
Unscored —
The XEN_DOMCTL_memory_mapping hypercall in Xen 3.2.x through 4.5.x, when using a PCI passthrough device, is not preempt…
-
Unscored —
QEMU, as used in Xen 3.3.x through 4.5.x, does not properly restrict access to PCI command registers, which might allow…
-
Unscored —
Xen 4.5.x and earlier enables certain default backends when emulating a VGA device for an x86 HVM guest qemu even when …
-
Unscored —
The HYPERVISOR_xen_version hypercall in Xen 3.2.x through 4.5.x does not properly initialize data structures, which all…
-
Unscored —
The emulation routines for unspecified X86 devices in Xen 3.2.x through 4.5.x does not properly initialize data, which …
-
Unscored —
The x86 emulator in Xen 3.2.x through 4.5.x does not properly ignore segment overrides for instructions with register o…
-
Unscored —
The ARM GIC distributor virtualization in Xen 4.4.x and 4.5.x allows local guests to cause a denial of service by causi…
-
Unscored —
The evtchn_fifo_set_pending function in Xen 4.4.x allows local guest users to cause a denial of service (host crash) vi…
-
Unscored —
Use-after-free vulnerability in Xen 4.2.x, 4.3.x, and 4.4.x allows remote domains to cause a denial of service (system …
-
Unscored —
Xen 4.4.x and earlier, when using a large number of VCPUs, does not properly handle read and write locks, which allows …
-
Unscored —
common/spinlock.c in Xen 4.4.x and earlier does not properly handle read and write locks, which allows local x86 guest …
-
Unscored —
The acceleration support for the "REP MOVS" instruction in Xen 4.4.x, 3.2.x, and earlier lacks properly bounds checking…
-
Unscored —
The compatibility mode hypercall argument translation in Xen 3.3.x through 4.4.x, when running on a 64-bit hypervisor, …
-
Unscored —
The do_mmu_update function in arch/x86/mm.c in Xen 3.2.x through 4.4.x does not properly manage page references, which …
-
Unscored —
arch/x86/x86_emulate/x86_emulate.c in Xen 3.2.1 through 4.4.x does not properly check privileges, which allows local HV…
-
Unscored —
The do_mmu_update function in arch/x86/mm.c in Xen 4.x through 4.4.x does not properly restrict updates to only PV page…
-
Unscored —
Xen 4.4.x, when running on an ARM system and "handling an unknown system register access from 64-bit userspace," return…
-
Unscored —
Race condition in HVMOP_track_dirty_vram in Xen 4.0.0 through 4.4.x does not ensure possession of the guarding lock for…
-
Unscored —
The x86_emulate function in arch/x86/x86_emulate/x86_emulate.c in Xen 4.4.x and earlier does not properly check supervi…
-
Unscored —
The hvm_msr_read_intercept function in arch/x86/hvm/hvm.c in Xen 4.1 through 4.4.x uses an improper MSR range for x2API…
-
Unscored —
The x86_emulate function in arch/x86/x86_emulate/x86_emulate.c in Xen 3.3.x through 4.4.x does not check the supervisor…
-
Unscored —
Xen 4.4.x, when running a 64-bit kernel on an ARM system, does not properly handle traps from the guest domain that use…