489 results · Feed
-
Unscored —
Xen, when running on a 64-bit hypervisor, allows local x86 guest OS users to modify arbitrary memory and consequently o…
-
Unscored —
The pygrub boot loader emulator in Xen, when S-expression output format is requested, allows local pygrub-using guest O…
-
Unscored —
The pygrub boot loader emulator in Xen, when nul-delimited output format is requested, allows local pygrub-using guest …
-
Unscored —
Xen 4.7.x and earlier does not properly honor CR0.TS and CR0.EM, which allows local x86 HVM guest OS users to read or m…
-
Unscored —
Use-after-free vulnerability in the FIFO event channel code in Xen 4.4.x allows local guest OS administrators to cause …
-
Unscored —
Buffer overflow in Xen 4.7.x and earlier allows local x86 HVM guest OS administrators on guests running with shadow pag…
-
Unscored —
The get_page_from_l3e function in arch/x86/mm.c in Xen allows local 32-bit PV guest OS administrators to gain host OS p…
-
Unscored —
Xen 4.5.x through 4.7.x do not implement Supervisor Mode Access Prevention (SMAP) whitelisting in 32-bit exception and …
-
Unscored —
The PV pagetable code in arch/x86/mm.c in Xen 4.7.x and earlier allows local 32-bit PV guest OS administrators to gain …
-
Unscored —
The libxl device-handling in Xen through 4.6.x allows local guest OS users with access to the driver domain to cause a …
-
Unscored —
The libxl device-handling in Xen 4.6.x and earlier allows local OS guest administrators to cause a denial of service (r…
-
Unscored —
The p2m_teardown function in arch/arm/p2m.c in Xen 4.4.x through 4.6.x allows local guest OS users with access to the d…
-
Unscored —
The qemu implementation in libvirt before 1.3.0 and Xen allows local guest OS users to cause a denial of service (host …
-
Unscored —
The guest_walk_tables function in arch/x86/mm/guest_walk.c in Xen 4.6.x and earlier does not properly handle the Page S…
-
Unscored —
Integer overflow in the VGA module in QEMU allows local guest OS users to cause a denial of service (out-of-bounds read…
-
Unscored —
The VGA module in QEMU improperly performs bounds checking on banked access to video memory, which allows local guest O…
-
Unscored —
Integer overflow in the x86 shadow pagetable code in Xen allows local guest OS users to cause a denial of service (host…
-
Unscored —CVE-2015-8550 Public exploit
Xen, when used on a system providing PV backends, allows local guest OS administrators to cause a denial of service (ho…
-
Unscored —
Buffer overflow in hw/pt-msi.c in Xen 4.6.x and earlier, when using the qemu-xen-traditional (aka qemu-dm) device model…
-
Unscored —
The xrstor function in arch/x86/xstate.c in Xen 4.x does not properly handle writes to the hardware FSW.ES bit when run…
-
Unscored —
The fpu_fxrstor function in arch/x86/i387.c in Xen 4.x does not properly handle writes to the hardware FSW.ES bit when …
-
Unscored —
Xen 4.6.x, 4.5.x, 4.4.x, 4.3.x, and earlier do not initialize x86 FPU stack and XMM registers when XSAVE/XRSTOR are not…
-
Unscored —
VMX in Xen 4.6.x and earlier, when using an Intel or Cyrix CPU, allows local HVM guest users to cause a denial of servi…
-
Unscored —
Xen 4.6.x and earlier allows local guest administrators to cause a denial of service (host reboot) via vectors related …
-
Unscored —
The paging_invlpg function in include/asm-x86/paging.h in Xen 3.3.x through 4.6.x, when using shadow mode paging or nes…
-
Unscored —
The PV superpage functionality in arch/x86/mm.c in Xen 3.4.0, 3.4.1, and 4.1.x through 4.6.x allows local PV guests to …
-
Unscored —
The hvm_set_callback_via function in arch/x86/hvm/irq.c in Xen 4.6 does not limit the number of printk console messages…
-
Unscored —
The memory_exchange function in common/memory.c in Xen 3.2.x through 4.6.x does not properly hand back pages to a domai…
-
Unscored —
The memory_exchange function in common/memory.c in Xen 3.2.x through 4.6.x does not properly release locks, which might…
-
Unscored —
Xen 4.6.x and earlier does not properly enforce limits on page order inputs for the (1) XENMEM_increase_reservation, (2…
-
Unscored —
The libxl toolstack library in Xen 4.1.x through 4.6.x does not properly release mappings of files used as kernels and …
-
Unscored —
The hypercall_create_continuation function in arch/arm/domain.c in Xen 4.4.x through 4.6.x allows local guest users to …
-
Unscored —
The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a deni…
-
Critical 10.0
The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a deni…
-
Unscored —
The (1) libxl_set_memory_target function in tools/libxl/libxl.c and (2) libxl__build_post function in tools/libxl/libxl…
-
Unscored —
Xen 4.4.x, 4.5.x, and 4.6.x does not limit the number of printk console messages when reporting unimplemented hypercall…
-
Unscored —
Multiple memory leaks in Xen 4.0 through 4.6.x allow local guest administrators or domains with certain permission to c…
-
Unscored —
The p2m_pod_emergency_sweep function in arch/x86/mm/p2m-pod.c in Xen 3.4.x, 3.5.x, and 3.6.x is not preemptible, which …
-
Unscored —
Xen 3.2.x through 4.6.x does not limit the number of printk console messages when logging certain pmu and profiling hyp…
-
Unscored —
Race condition in the relinquish_memory function in arch/arm/domain.c in Xen 4.6.x and earlier allows local domains wit…