xen vulnerabilities (Ubuntu)
391 vulnerabilities.
xenUbuntuThe pygrub boot loader emulator in Xen, when S-expression output format is requested, allows...7.9 HighxenUbuntuXen 4.7.x and earlier does not properly honor CR0.TS and CR0.EM, which allows local x86 HVM guest...6.3 MediumxenUbuntuUse-after-free vulnerability in the FIFO event channel code in Xen 4.4.x allows local guest OS...6.7 MediumxenUbuntuBuffer overflow in Xen 4.7.x and earlier allows local x86 HVM guest OS administrators on guests...4.1 MediumxenUbuntuThe get_page_from_l3e function in arch/x86/mm.c in Xen allows local 32-bit PV guest OS...8.2 HighxenUbuntuXen 4.5.x through 4.7.x do not implement Supervisor Mode Access Prevention (SMAP) whitelisting in...6.2 MediumxenUbuntuThe virtqueue_pop function in hw/virtio/virtio.c in QEMU allows local guest OS administrators to...5.5 MediumxenUbuntuThe PV pagetable code in arch/x86/mm.c in Xen 4.7.x and earlier allows local 32-bit PV guest OS...8.8 HighxenUbuntuThe p2m_teardown function in arch/arm/p2m.c in Xen 4.4.x through 4.6.x allows local guest OS...5.6 MediumxenUbuntuThe libxl device-handling in Xen through 4.6.x allows local guest OS users with access to the...4.7 MediumxenUbuntuThe libxl device-handling in Xen 4.6.x and earlier allows local OS guest administrators to cause...6.7 MediumxenUbuntuThe qemu implementation in libvirt before 1.3.0 and Xen allows local guest OS users to cause a...6.5 MediumxenUbuntuThe guest_walk_tables function in arch/x86/mm/guest_walk.c in Xen 4.6.x and earlier does not...8.4 HighxenUbuntuThe VGA module in QEMU improperly performs bounds checking on banked access to video memory,...8.8 HighxenUbuntuInteger overflow in the x86 shadow pagetable code in Xen allows local guest OS users to cause a...8.8 HighxenUbuntuThe fpu_fxrstor function in arch/x86/i387.c in Xen 4.x does not properly handle writes to the...3.8 LowxenUbuntuThe xrstor function in arch/x86/xstate.c in Xen 4.x does not properly handle writes to the...3.8 LowxenUbuntuBuffer overflow in hw/pt-msi.c in Xen 4.6.x and earlier, when using the qemu-xen-traditional (aka...7.5 HighxenUbuntuXen 4.6.x, 4.5.x, 4.4.x, 4.3.x, and earlier do not initialize x86 FPU stack and XMM registers...8.6 HighxenUbuntuVMX in Xen 4.6.x and earlier, when using an Intel or Cyrix CPU, allows local HVM guest users to...5.5 MediumxenUbuntuXen 4.6.x and earlier allows local guest administrators to cause a denial of service (host reboot...6.8 MediumxenUbuntuThe paging_invlpg function in include/asm-x86/paging.h in Xen 3.3.x through 4.6.x, when using...6.3 MediumxenUbuntuThe PV superpage functionality in arch/x86/mm.c in Xen 3.4.0, 3.4.1, and 4.1.x through 4.6.x...8.5 HighxenUbuntuThe libxl toolstack library in Xen 4.1.x through 4.6.x does not properly release mappings of...7.8 HighxenUbuntuThe memory_exchange function in common/memory.c in Xen 3.2.x through 4.6.x does not properly...4.7 MediumxenUbuntuThe memory_exchange function in common/memory.c in Xen 3.2.x through 4.6.x does not properly hand...4.7 MediumxenUbuntuXen 4.6.x and earlier does not properly enforce limits on page order inputs for the (1)...7.2 HighxenUbuntuXen, when used on a system providing PV backends, allows local guest OS administrators to cause a...8.2 HighxenUbuntuHeap-based buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU allows guest...8.8 HighxenUbuntuThe hypercall_create_continuation function in arch/arm/domain.c in Xen 4.4.x through 4.6.x allows...4.9 MediumxenUbuntuThe KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS...4.7 MediumxenUbuntuThe KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS...4.9 MediumxenUbuntuThe (1) libxl_set_memory_target function in tools/libxl/libxl.c and (2) libxl__build_post...2.1 LowxenUbuntuThe p2m_pod_emergency_sweep function in arch/x86/mm/p2m-pod.c in Xen 3.4.x, 3.5.x, and 3.6.x is...4.9 MediumxenUbuntuRace condition in the relinquish_memory function in arch/arm/domain.c in Xen 4.6.x and earlier...4.7 MediumxenUbuntuXen 4.4.x, 4.5.x, and 4.6.x does not limit the number of printk console messages when reporting...2.1 LowxenUbuntuXen 3.2.x through 4.6.x does not limit the number of printk console messages when logging certain...2.1 LowxenUbuntuMultiple memory leaks in Xen 4.0 through 4.6.x allow local guest administrators or domains with...4.9 MediumxenUbuntuThe mod_l2_entry function in arch/x86/mm.c in Xen 3.4 through 4.6.x does not properly validate...7.2 HighxenUbuntulibxl in Xen 4.1.x through 4.6.x does not properly handle the readonly flag on disks when using...3.6 LowxenUbuntuThe xenmem_add_to_physmap_one function in arch/arm/mm.c in Xen 4.5.x, 4.4.x, and earlier does not...2.1 LowxenUbuntuThe C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4...9.3 HighxenUbuntuHeap-based buffer overflow in the IDE subsystem in QEMU, as used in Xen 4.5.x and earlier, when...7.2 HighxenUbuntuStack-based buffer overflow in the xl command line utility in Xen 4.1.x through 4.5.x allows...6.8 MediumxenUbuntuThe compat_iret function in Xen 3.1 through 4.5 iterates the wrong way through a loop, which...4.9 MediumxenUbuntuGNTTABOP_swap_grant_ref in Xen 4.2 through 4.5 does not check the grant table operation version,...4.9 MediumxenUbuntuQEMU does not properly restrict write access to the PCI config space for certain PCI pass-through...4.6 MediumxenUbuntuXen 3.3.x through 4.5.x enables logging for PCI MSI-X pass-through error messages, which allows...4.9 MediumxenUbuntuXen 3.3.x through 4.5.x does not properly restrict access to PCI MSI mask bits, which allows...7.8 HighxenUbuntuXen 3.3.x through 4.5.x does not properly restrict write access to the host MSI message data...4.9 Medium- Show moreLoading…