xen vulnerabilities (Debian)
491 vulnerabilities.
xenDebianXen, when used on a system providing PV backends, allows local guest OS administrators to cause a...8.2 HighxenDebianThe hypercall_create_continuation function in arch/arm/domain.c in Xen 4.4.x through 4.6.x allows...4.9 MediumxenDebianThe KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS...4.7 MediumxenDebianThe KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS...4.9 MediumxenDebianThe (1) libxl_set_memory_target function in tools/libxl/libxl.c and (2) libxl__build_post...2.1 LowxenDebianThe p2m_pod_emergency_sweep function in arch/x86/mm/p2m-pod.c in Xen 3.4.x, 3.5.x, and 3.6.x is...4.9 MediumxenDebianRace condition in the relinquish_memory function in arch/arm/domain.c in Xen 4.6.x and earlier...4.7 MediumxenDebianXen 4.4.x, 4.5.x, and 4.6.x does not limit the number of printk console messages when reporting...2.1 LowxenDebianXen 3.2.x through 4.6.x does not limit the number of printk console messages when logging certain...2.1 LowxenDebianMultiple memory leaks in Xen 4.0 through 4.6.x allow local guest administrators or domains with...4.9 MediumxenDebianThe mod_l2_entry function in arch/x86/mm.c in Xen 3.4 through 4.6.x does not properly validate...7.2 HighxenDebianlibxl in Xen 4.1.x through 4.6.x does not properly handle the readonly flag on disks when using...3.6 LowxenDebianThe xenmem_add_to_physmap_one function in arch/arm/mm.c in Xen 4.5.x, 4.4.x, and earlier does not...2.1 LowxenDebianUse-after-free vulnerability in QEMU in Xen 4.5.x and earlier does not completely unplug emulated...7.2 HighxenDebianThe C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4...9.3 HighxenDebianHeap-based buffer overflow in the IDE subsystem in QEMU, as used in Xen 4.5.x and earlier, when...7.2 HighxenDebianStack-based buffer overflow in the xl command line utility in Xen 4.1.x through 4.5.x allows...6.8 MediumxenDebianThe pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not...6.9 MediumxenDebianThe compat_iret function in Xen 3.1 through 4.5 iterates the wrong way through a loop, which...4.9 MediumxenDebianGNTTABOP_swap_grant_ref in Xen 4.2 through 4.5 does not check the grant table operation version,...4.9 MediumxenDebianQEMU does not properly restrict write access to the PCI config space for certain PCI pass-through...4.6 MediumxenDebianXen 3.3.x through 4.5.x enables logging for PCI MSI-X pass-through error messages, which allows...4.9 MediumxenDebianXen 3.3.x through 4.5.x does not properly restrict access to PCI MSI mask bits, which allows...7.8 HighxenDebianXen 3.3.x through 4.5.x does not properly restrict write access to the host MSI message data...4.9 MediumxenDebianThe XEN_DOMCTL_memory_mapping hypercall in Xen 3.2.x through 4.5.x, when using a PCI passthrough...4.9 MediumxenDebianXen 4.3.x, 4.4.x, and 4.5.x, when using toolstack disaggregation, allows remote domains with...7.1 HighxenDebianQEMU, as used in Xen 3.3.x through 4.5.x, does not properly restrict access to PCI command...4.9 MediumxenDebianXen 4.5.x and earlier enables certain default backends when emulating a VGA device for an x86 HVM...1.9 LowxenDebianThe x86 emulator in Xen 3.2.x through 4.5.x does not properly ignore segment overrides for...7.2 HighxenDebianThe HYPERVISOR_xen_version hypercall in Xen 3.2.x through 4.5.x does not properly initialize data...2.1 LowxenDebianThe emulation routines for unspecified X86 devices in Xen 3.2.x through 4.5.x does not properly...2.1 LowxenDebianThe ARM GIC distributor virtualization in Xen 4.4.x and 4.5.x allows local guests to cause a...2.1 LowxenDebianThe evtchn_fifo_set_pending function in Xen 4.4.x allows local guest users to cause a denial of...4.9 MediumxenDebianUse-after-free vulnerability in Xen 4.2.x, 4.3.x, and 4.4.x allows remote domains to cause a...7.8 HighxenDebianXen 4.4.x and earlier, when using a large number of VCPUs, does not properly handle read and...4.7 MediumxenDebiancommon/spinlock.c in Xen 4.4.x and earlier does not properly handle read and write locks, which...4.4 MediumxenDebianXen 4.4.x, when running on an ARM system and "handling an unknown system register access from 64...4.6 MediumxenDebianThe hvm_msr_read_intercept function in arch/x86/hvm/hvm.c in Xen 4.1 through 4.4.x uses an...8.3 HighxenDebianXen 4.4.x, when running a 64-bit kernel on an ARM system, does not properly handle traps from the...4.3 MediumxenDebianCertain MMU virtualization operations in Xen 4.2.x through 4.4.x, when using shadow pagetables,...4.7 MediumxenDebianCertain MMU virtualization operations in Xen 4.2.x through 4.4.x before the xsa97-hap patch, when...4.7 MediumxenDebianThe HVMOP_inject_msi function in Xen 4.2.x, 4.3.x, and 4.4.x allows local guest HVM...5.5 MediumxenDebianThe HVMOP_inject_msi function in Xen 4.2.x, 4.3.x, and 4.4.x does not properly check the return...5.5 MediumxenDebianThe HVMOP_set_mem_type control in Xen 4.1 through 4.4.x allows local guest HVM administrators to...6.7 MediumxenDebianThe (1) do_send and (2) do_recv functions in io.c in libvchan in Xen 4.2.x, 4.3.x, and 4.4-RC...4.9 MediumxenDebianOff-by-one error in the flask_security_avc_cachestats function in xsm/flask/flask_op.c in Xen 4.2...5.8 MediumxenDebianThe HVMOP_set_mem_access HVM control operations in Xen 4.1.x for 32-bit and 4.1.x through 4.4.x...4.9 MediumxenDebianBuffer overflow in the ccid_card_vscard_handle_message function in hw/ccid-card-passthru.c in...6.8 MediumxenDebianUse-after-free vulnerability in the xc_cpupool_getinfo function in Xen 4.1.x through 4.3.x, when...4.6 MediumxenDebianThe do_physdev_op function in Xen 4.1.5, 4.1.6.1, 4.2.2 through 4.2.3, and 4.3.x does not...8.3 High- Show moreLoading…