xen vulnerabilities (Debian)
491 vulnerabilities.
xenDebianThe IRQ setup in Xen 4.2.x and 4.3.x, when using device passthrough and configured to support a...4.4 MediumxenDebianThe qdisk PV disk backend in qemu-xen in Xen 4.2.x and 4.3.x before 4.3.1, and qemu 1.1 and other...2.7 LowxenDebianThe XEN_DOMCTL_getmemlist hypercall in Xen 3.4.x through 4.3.x (possibly 4.3.1) does not always...5.2 MediumxenDebianXen 4.2.x and 4.3.x, when using Intel VT-d and a PCI device has been assigned, does not clear the...6.8 MediumxenDebianXen 4.2.x and 4.3.x, when using Intel VT-d for PCI passthrough, does not properly flush the TLB...7.9 HighxenDebianXen 4.2.x and 4.3.x, when nested virtualization is disabled, does not properly check the...5.7 MediumxenDebianXen before 4.1.x, 4.2.x, and 4.3.x does not take the page_alloc_lock and grant_table.lock in the...5.2 MediumxenDebianUse-after-free vulnerability in the libxl_list_cpupool function in the libxl toolstack library in...4.4 MediumxenDebianThe ocaml binding for the xc_vcpu_getaffinity function in Xen 4.2.x and 4.3.x frees certain...4.6 MediumxenDebianThe xlu_vif_parse_rate function in the libxlu library in Xen 4.2.x and 4.3.x allows local users...1.9 LowxenDebianThe outs instruction emulation in Xen 3.1.x, 4.2.x, 4.3.x, and earlier, when using FS: or GS:...1.9 LowxenDebianXen 4.3.x writes hypervisor mappings to certain shadow pagetables when live migration is...5.4 MediumxenDebianBuffer overflow in the SCSI implementation in QEMU, as used in Xen, when a SCSI controller has...7.2 HighxenDebianThe fbld instruction emulation in Xen 3.3.x through 4.3.x does not use the correct variable for...2.1 LowxenDebianXen 4.3.x and earlier does not properly handle certain errors, which allows local HVM guests to...1.5 LowxenDebianXen 4.0 through 4.3.x, when using AVX or LWP capable CPUs, does not properly clear previous data...1.2 LowxenDebianThe xenlight library (libxl) in Xen 4.0.x through 4.2.x, when IOMMU is disabled, provides access...6.5 MediumxenDebianThe vmx_set_uc_mode function in Xen 3.3 through 4.3, when disabling caches, allows local HVM...5.7 MediumxenDebianThe libxenlight (libxl) toolstack library in Xen 4.0.x, 4.1.x, and 4.2.x uses weak permissions...7.4 HighxenDebianMultiple unspecified vulnerabilities in the Elf parser (libelf) in Xen 4.2.x and earlier allow...6.9 MediumxenDebianThe Elf parser (libelf) in Xen 4.2.x and earlier allow local guest administrators with certain...6.9 MediumxenDebianMultiple integer overflows in the Elf parser (libelf) in Xen 4.2.x and earlier allow local guest...6.9 MediumxenDebianXen 4.0.2 through 4.0.4, 4.1.x, and 4.2.x allows local PV guest users to cause a denial of...4.7 MediumxenDebianXen 4.0.x, 4.1.x, and 4.2.x does not properly restrict the contents of a XRSTOR, which allows...5.2 MediumxenDebianXen 4.0.x, 4.1.x, and 4.2.x, when running on AMD64 processors, only save/restore the FOP, FIP,...4.3 MediumxenDebianBuffer overflow in the Python bindings for the xc_vcpu_setaffinity call in Xen 4.0.x, 4.1.x, and...7.4 HighxenDebianXen 4.1.x and 4.2.x, when the XSA-45 patch is in place, does not properly maintain references on...7.4 HighxenDebianXen 4.0.x and 4.1.x incorrectly releases a grant reference when releasing a non-v1, non...6.9 MediumxenDebianXen 4.x, when using Intel VT-d for a bus mastering capable PCI device, does not properly check...1.9 LowxenDebianCertain page table manipulation operations in Xen 4.1.x, 4.2.x, and earlier are not preemptible,...4.7 MediumxenDebianXen 4.2.x and 4.1.x does not properly restrict access to IRQs, which allows local stub domain...4.7 MediumxenDebianXen 3.1 through 4.x, when running 64-bit hosts on Intel CPUs, does not clear the NT flag when...1.9 LowxenDebianThe AMD IOMMU support in Xen 4.2.x, 4.1.x, 3.3, and other versions, when using AMD-Vi for PCI...4.7 MediumxenDebianXen 4.2.x, 4.1.x, and 4.0, when using Intel VT-d for PCI passthrough, does not properly configure...6.1 MediumxenDebianBuffer overflow in the e1000_receive function in the e1000 device driver (hw/e1000.c) in QEMU 1.3...9.3 HighxenDebianMultiple HVM control operations in Xen 3.4 through 4.2 allow local HVM guest OS administrators to...4.7 MediumxenDebianArray index error in the HVMOP_set_mem_access handler in Xen 4.1 allows local HVM guest OS...3.2 LowxenDebianXen 4.1.1 and earlier allows local guest OS kernels with control of a PCI[E] device to cause a...4.6 MediumxenDebianThe HVMOP_pagetable_dying hypercall in Xen 4.0, 4.1, and 4.2 does not properly check the...4.9 MediumxenDebianThe (1) memc_save_get_next_page, (2) tmemc_restore_put_page and (3) tmemc_restore_flush_page...4.4 MediumxenDebianThe do_tmem_destroy_pool function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 does...6.9 MediumxenDebianThe (1) tmemc_save_get_next_page and (2) tmemc_save_get_next_inv functions and the (3)...4.4 MediumxenDebianThe do_tmem_control function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 does not...4.4 MediumxenDebianMultiple integer overflows in the (1) tmh_copy_from_client and (2) tmh_copy_to_client functions...4.9 MediumxenDebianThe do_tmem_get function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 allow local...4.7 MediumxenDebianThe do_tmem_op function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 allow local...7.2 HighxenDebianPHYSDEVOP_map_pirq in Xen 4.1 and 4.2 and Citrix XenServer 6.0.2 and earlier allows local HVM...5.6 MediumxenDebian(1) TMEMC_SAVE_GET_CLIENT_WEIGHT, (2) TMEMC_SAVE_GET_CLIENT_CAP, (3) TMEMC_SAVE_GET_CLIENT_FLAGS...6.9 MediumxenDebianThe physdev_get_free_pirq hypercall in arch/x86/physdev.c in Xen 4.1.x and Citrix XenServer 6.0.2...6.1 MediumxenDebianXen 4.2.x through 4.5.x does not initialize certain fields, which allows certain remote service...2.9 Low- Show moreLoading…