489 results · Feed
-
Unscored —
An issue was discovered in Xen 4.5.x through 4.9.x. The function `__gnttab_cache_flush` handles GNTTABOP_cache_flush gr…
-
Unscored —
A domain cleanup issue was discovered in the C xenstore daemon (aka cxenstored) in Xen through 4.9.x. When shutting dow…
-
Unscored —
A parameter verification issue was discovered in Xen through 4.9.x. The function `alloc_heap_pages` allows callers to s…
-
Unscored —
Race condition in the grant table code in Xen 4.6.x through 4.9.x allows local guest OS administrators to cause a denia…
-
Unscored —
arch/x86/mm.c in Xen allows local PV guest OS users to gain host OS privileges via vectors related to map_grant_ref.
-
Unscored —
Xen allows local OS guest users to cause a denial of service (crash) or possibly obtain sensitive information or gain p…
-
Unscored —
Xen maintains the _GTF_{read,writ}ing bits as appropriate, to inform the guest that a grant is in use. A guest is expec…
-
Unscored —
Xen through 4.8.x does not validate the port numbers of polled event channel ports, which allows guest OS users to caus…
-
Unscored —
The shadow-paging feature in Xen through 4.8.x mismanages page references and consequently introduces a race condition,…
-
Unscored —
The vCPU context-switch implementation in Xen through 4.8.x improperly interacts with the Memory Protection Extensions …
-
Unscored —
The grant-table feature in Xen through 4.8.x has a race condition leading to a double free, which allows guest OS users…
-
Unscored —
The grant-table feature in Xen through 4.8.x provides false mapping information in certain cases of concurrent unmap ca…
-
Unscored —
Xen through 4.8.x mishandles page transfer, which allows guest OS users to obtain privileged host OS access, aka XSA-21…
-
Unscored —
The grant-table feature in Xen through 4.8.x mishandles a GNTMAP_device_map and GNTMAP_host_map mapping, when followed …
-
Unscored —
Xen through 4.8.x mishandles virtual interrupt injection, which allows guest OS users to cause a denial of service (hyp…
-
Unscored —
Xen through 4.8.x does not validate memory allocations during certain P2M operations, which allows guest OS users to ob…
-
Unscored —
The grant-table feature in Xen through 4.8.x does not ensure sufficient type counts for a GNTMAP_device_map and GNTMAP_…
-
Unscored —
The grant-table feature in Xen through 4.8.x mishandles MMIO region grant references, which allows guest OS users to ca…
-
Unscored —
Xen through 4.8.x does not validate a vCPU array index upon the sending of an SGI, which allows guest OS users to cause…
-
Unscored —
Xen through 4.6.x on 64-bit platforms mishandles a failsafe callback, which might allow PV guest OS users to execute ar…
-
Unscored —
Xen through 4.8.x on 64-bit platforms mishandles page tables after an IRET hypercall, which might allow PV guest OS use…
-
Unscored —
Xen through 4.8.x mishandles the "contains segment descriptors" property during GNTTABOP_transfer (aka guest transfer) …
-
Unscored —
Xen PV guest before Xen 4.3 checked access permissions to MMIO ranges only after accessing them, allowing host PCI devi…
-
Unscored —CVE-2017-7228 Public exploit
An issue (known as XSA-212) was discovered in Xen, with fixes available for 4.8.x, 4.7.x, 4.6.x, 4.5.x, and 4.4.x. The …
-
Unscored —
Xen through 4.7.x allows local ARM guest OS users to cause a denial of service (host crash) via vectors involving an as…
-
Unscored —
Xen through 4.7.x allows local ARM guest OS users to cause a denial of service (host crash) via vectors involving an as…
-
Unscored —
Xen through 4.7.x allows local ARM guest OS users to cause a denial of service (host crash) via vectors involving a (1)…
-
Unscored —
Xen through 4.7.x allows local ARM guest OS users to cause a denial of service (host panic) by sending an asynchronous …
-
Unscored —
Xen 4.7 allows local guest OS users to obtain sensitive host information by loading a 32-bit ELF symbol table.
-
Unscored —
Xen 4.5.x through 4.7.x on AMD systems without the NRip feature, when emulating instructions that generate software int…
-
Unscored —
Xen 4.5.x through 4.7.x on AMD systems without the NRip feature, when emulating instructions that generate software int…
-
Unscored —
The (1) ioport_read and (2) ioport_write functions in Xen, when qemu is used as a device model within Xen, might allow …
-
Unscored —
CMPXCHG8B emulation in Xen 3.3.x through 4.7.x on x86 systems allows local HVM guest OS users to obtain sensitive infor…
-
Unscored —
VMFUNC emulation in Xen 4.6.x through 4.8.x on x86 systems using AMD virtualization extensions (aka SVM) allows local H…
-
Unscored —
Xen through 4.8.x allows local 64-bit x86 HVM guest OS users to gain privileges by leveraging mishandling of SYSCALL si…
-
Unscored —
Xen through 4.8.x allows local x86 PV guest OS kernel administrators to cause a denial of service (host hang or crash) …
-
Unscored —
Xen 4.0.x through 4.7.x mishandle x86 task switches to VM86 mode, which allows local 32-bit x86 HVM guest OS users to g…
-
Unscored —
The x86 segment base write emulation functionality in Xen 4.4.x through 4.7.x allows local x86 PV guest OS administrato…
-
Unscored —
The x86 emulator in Xen does not properly treat x86 NULL segments as unusable when accessing memory, which might allow …
-
Unscored —
Race condition in QEMU in Xen allows local x86 HVM guest OS administrators to gain privileges by changing certain data …