390 results · Feed
-
Unscored —
Xen through 4.6.x on 64-bit platforms mishandles a failsafe callback, which might allow PV guest OS users to execute ar…
-
Unscored —
Xen through 4.8.x on 64-bit platforms mishandles page tables after an IRET hypercall, which might allow PV guest OS use…
-
Unscored —
Xen through 4.8.x mishandles the "contains segment descriptors" property during GNTTABOP_transfer (aka guest transfer) …
-
Unscored —CVE-2017-7228 Public exploit
An issue (known as XSA-212) was discovered in Xen, with fixes available for 4.8.x, 4.7.x, 4.6.x, 4.5.x, and 4.4.x. The …
-
Unscored —
Xen through 4.7.x allows local ARM guest OS users to cause a denial of service (host crash) via vectors involving an as…
-
Unscored —
Xen through 4.7.x allows local ARM guest OS users to cause a denial of service (host crash) via vectors involving an as…
-
Unscored —
Xen through 4.7.x allows local ARM guest OS users to cause a denial of service (host crash) via vectors involving a (1)…
-
Unscored —
Xen through 4.7.x allows local ARM guest OS users to cause a denial of service (host panic) by sending an asynchronous …
-
Unscored —
Xen 4.5.x through 4.7.x on AMD systems without the NRip feature, when emulating instructions that generate software int…
-
Unscored —
Xen 4.5.x through 4.7.x on AMD systems without the NRip feature, when emulating instructions that generate software int…
-
Unscored —
The (1) ioport_read and (2) ioport_write functions in Xen, when qemu is used as a device model within Xen, might allow …
-
Unscored —
CMPXCHG8B emulation in Xen 3.3.x through 4.7.x on x86 systems allows local HVM guest OS users to obtain sensitive infor…
-
Unscored —
VMFUNC emulation in Xen 4.6.x through 4.8.x on x86 systems using AMD virtualization extensions (aka SVM) allows local H…
-
Unscored —
Xen through 4.8.x allows local 64-bit x86 HVM guest OS users to gain privileges by leveraging mishandling of SYSCALL si…
-
Unscored —
Xen through 4.8.x allows local x86 PV guest OS kernel administrators to cause a denial of service (host hang or crash) …
-
Unscored —
Xen 4.0.x through 4.7.x mishandle x86 task switches to VM86 mode, which allows local 32-bit x86 HVM guest OS users to g…
-
Unscored —
The x86 segment base write emulation functionality in Xen 4.4.x through 4.7.x allows local x86 PV guest OS administrato…
-
Unscored —
The x86 emulator in Xen does not properly treat x86 NULL segments as unusable when accessing memory, which might allow …
-
Unscored —
Race condition in QEMU in Xen allows local x86 HVM guest OS administrators to gain privileges by changing certain data …
-
Unscored —
Xen, when running on a 64-bit hypervisor, allows local x86 guest OS users to modify arbitrary memory and consequently o…
-
Unscored —
The pygrub boot loader emulator in Xen, when S-expression output format is requested, allows local pygrub-using guest O…
-
Unscored —
The pygrub boot loader emulator in Xen, when nul-delimited output format is requested, allows local pygrub-using guest …
-
Unscored —
Xen 4.7.x and earlier does not properly honor CR0.TS and CR0.EM, which allows local x86 HVM guest OS users to read or m…
-
Unscored —
Use-after-free vulnerability in the FIFO event channel code in Xen 4.4.x allows local guest OS administrators to cause …
-
Unscored —
Buffer overflow in Xen 4.7.x and earlier allows local x86 HVM guest OS administrators on guests running with shadow pag…
-
Unscored —
The get_page_from_l3e function in arch/x86/mm.c in Xen allows local 32-bit PV guest OS administrators to gain host OS p…
-
Unscored —
Xen 4.5.x through 4.7.x do not implement Supervisor Mode Access Prevention (SMAP) whitelisting in 32-bit exception and …
-
Unscored —
The PV pagetable code in arch/x86/mm.c in Xen 4.7.x and earlier allows local 32-bit PV guest OS administrators to gain …
-
Unscored —
The virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to cause a denial of serv…
-
Unscored —
The libxl device-handling in Xen through 4.6.x allows local guest OS users with access to the driver domain to cause a …
-
Unscored —
The libxl device-handling in Xen 4.6.x and earlier allows local OS guest administrators to cause a denial of service (r…
-
Unscored —
The p2m_teardown function in arch/arm/p2m.c in Xen 4.4.x through 4.6.x allows local guest OS users with access to the d…
-
Unscored —
The qemu implementation in libvirt before 1.3.0 and Xen allows local guest OS users to cause a denial of service (host …
-
Unscored —
The guest_walk_tables function in arch/x86/mm/guest_walk.c in Xen 4.6.x and earlier does not properly handle the Page S…
-
Unscored —
The VGA module in QEMU improperly performs bounds checking on banked access to video memory, which allows local guest O…
-
Unscored —
Integer overflow in the x86 shadow pagetable code in Xen allows local guest OS users to cause a denial of service (host…
-
Unscored —CVE-2015-8550 Public exploit
Xen, when used on a system providing PV backends, allows local guest OS administrators to cause a denial of service (ho…
-
Unscored —
Buffer overflow in hw/pt-msi.c in Xen 4.6.x and earlier, when using the qemu-xen-traditional (aka qemu-dm) device model…
-
Unscored —
The xrstor function in arch/x86/xstate.c in Xen 4.x does not properly handle writes to the hardware FSW.ES bit when run…
-
Unscored —
The fpu_fxrstor function in arch/x86/i387.c in Xen 4.x does not properly handle writes to the hardware FSW.ES bit when …