Skip to content
OpenAdvisories

Package · Ubuntu

xen

390 known vulnerabilities.

390 results · Feed

  • Unscored —

    Xen 4.6.x, 4.5.x, 4.4.x, 4.3.x, and earlier do not initialize x86 FPU stack and XMM registers when XSAVE/XRSTOR are not…

  • Unscored —

    VMX in Xen 4.6.x and earlier, when using an Intel or Cyrix CPU, allows local HVM guest users to cause a denial of servi…

  • Unscored —

    Xen 4.6.x and earlier allows local guest administrators to cause a denial of service (host reboot) via vectors related …

  • Unscored —

    The paging_invlpg function in include/asm-x86/paging.h in Xen 3.3.x through 4.6.x, when using shadow mode paging or nes…

  • Unscored —

    The PV superpage functionality in arch/x86/mm.c in Xen 3.4.0, 3.4.1, and 4.1.x through 4.6.x allows local PV guests to …

  • Unscored —

    The memory_exchange function in common/memory.c in Xen 3.2.x through 4.6.x does not properly hand back pages to a domai…

  • Unscored —

    The memory_exchange function in common/memory.c in Xen 3.2.x through 4.6.x does not properly release locks, which might…

  • Unscored —

    Xen 4.6.x and earlier does not properly enforce limits on page order inputs for the (1) XENMEM_increase_reservation, (2…

  • Unscored —

    The libxl toolstack library in Xen 4.1.x through 4.6.x does not properly release mappings of files used as kernels and …

  • Unscored —

    The hypercall_create_continuation function in arch/arm/domain.c in Xen 4.4.x through 4.6.x allows local guest users to …

  • Unscored —

    The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a deni…

  • Critical 10.0

    The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a deni…

  • Unscored —

    The (1) libxl_set_memory_target function in tools/libxl/libxl.c and (2) libxl__build_post function in tools/libxl/libxl…

  • Unscored —

    Xen 4.4.x, 4.5.x, and 4.6.x does not limit the number of printk console messages when reporting unimplemented hypercall…

  • Unscored —

    Multiple memory leaks in Xen 4.0 through 4.6.x allow local guest administrators or domains with certain permission to c…

  • Unscored —

    The p2m_pod_emergency_sweep function in arch/x86/mm/p2m-pod.c in Xen 3.4.x, 3.5.x, and 3.6.x is not preemptible, which …

  • Unscored —

    Xen 3.2.x through 4.6.x does not limit the number of printk console messages when logging certain pmu and profiling hyp…

  • Unscored —

    Race condition in the relinquish_memory function in arch/arm/domain.c in Xen 4.6.x and earlier allows local domains wit…

  • Unscored —

    The mod_l2_entry function in arch/x86/mm.c in Xen 3.4 through 4.6.x does not properly validate level 2 page table entri…

  • Unscored —

    libxl in Xen 4.1.x through 4.6.x does not properly handle the readonly flag on disks when using the qemu-xen device mod…

  • Unscored —

    The xenmem_add_to_physmap_one function in arch/arm/mm.c in Xen 4.5.x, 4.4.x, and earlier does not limit the number of p…

  • Unscored —

    Heap-based buffer overflow in the IDE subsystem in QEMU, as used in Xen 4.5.x and earlier, when the container has a CDR…

  • Unscored —
    CVE-2015-5165 EPSS 13%

    The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allow…

  • Unscored —

    Stack-based buffer overflow in the xl command line utility in Xen 4.1.x through 4.5.x allows local guest administrators…

  • Unscored —

    GNTTABOP_swap_grant_ref in Xen 4.2 through 4.5 does not check the grant table operation version, which allows local gue…

  • Unscored —

    The compat_iret function in Xen 3.1 through 4.5 iterates the wrong way through a loop, which allows local 32-bit PV gue…

  • Unscored —

    Heap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to execute arbitrary code by sending…

  • Unscored —

    Xen 3.3.x through 4.5.x enables logging for PCI MSI-X pass-through error messages, which allows local x86 HVM guests to…

  • Unscored —

    Xen 3.3.x through 4.5.x does not properly restrict access to PCI MSI mask bits, which allows local x86 HVM guest users …

  • Unscored —

    Xen 3.3.x through 4.5.x does not properly restrict write access to the host MSI message data field, which allows local …

  • Unscored —

    QEMU does not properly restrict write access to the PCI config space for certain PCI pass-through devices, which might …

  • Unscored —
    CVE-2015-3456 Public exploit EPSS 15%

    The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a…

  • Unscored —

    Xen 4.2.x through 4.5.x does not initialize certain fields, which allows certain remote service domains to obtain sensi…

  • Unscored —

    Xen 4.3.x, 4.4.x, and 4.5.x, when using toolstack disaggregation, allows remote domains with partial management control…

  • Unscored —

    The XEN_DOMCTL_memory_mapping hypercall in Xen 3.2.x through 4.5.x, when using a PCI passthrough device, is not preempt…

  • Unscored —

    QEMU, as used in Xen 3.3.x through 4.5.x, does not properly restrict access to PCI command registers, which might allow…

  • Unscored —

    Xen 4.5.x and earlier enables certain default backends when emulating a VGA device for an x86 HVM guest qemu even when …

  • Unscored —

    The HYPERVISOR_xen_version hypercall in Xen 3.2.x through 4.5.x does not properly initialize data structures, which all…

  • Unscored —

    The emulation routines for unspecified X86 devices in Xen 3.2.x through 4.5.x does not properly initialize data, which …

  • Unscored —

    The x86 emulator in Xen 3.2.x through 4.5.x does not properly ignore segment overrides for instructions with register o…