xen vulnerabilities (openSUSE)
379 vulnerabilities.
xenopenSUSEXen 3.2.x through 4.6.x does not limit the number of printk console messages when logging certain...2.1 LowxenopenSUSEMultiple memory leaks in Xen 4.0 through 4.6.x allow local guest administrators or domains with...4.9 MediumxenopenSUSEThe mod_l2_entry function in arch/x86/mm.c in Xen 3.4 through 4.6.x does not properly validate...7.2 HighxenopenSUSElibxl in Xen 4.1.x through 4.6.x does not properly handle the readonly flag on disks when using...3.6 LowxenopenSUSEThe ne2000_receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows attackers to cause a...6.5 MediumxenopenSUSEhw/ide/core.c in QEMU does not properly restrict the commands accepted by an ATAPI device, which...7.5 HighxenopenSUSEThe process_tx_desc function in hw/net/e1000.c in QEMU before 2.4.0.1 does not properly process...3.5 LowxenopenSUSEInteger overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a...6.5 MediumxenopenSUSEHeap-based buffer overflow in the IDE subsystem in QEMU, as used in Xen 4.5.x and earlier, when...7.2 HighxenopenSUSEStack-based buffer overflow in the xl command line utility in Xen 4.1.x through 4.5.x allows...6.8 MediumxenopenSUSEQEMU does not properly restrict write access to the PCI config space for certain PCI pass-through...4.6 MediumxenopenSUSEXen 3.3.x through 4.5.x enables logging for PCI MSI-X pass-through error messages, which allows...4.9 MediumxenopenSUSEXen 3.3.x through 4.5.x does not properly restrict access to PCI MSI mask bits, which allows...7.8 HighxenopenSUSEXen 3.3.x through 4.5.x does not properly restrict write access to the host MSI message data...4.9 MediumxenopenSUSEThe slirp_smb function in net/slirp.c in QEMU 2.3.0 and earlier creates temporary files with...1.9 LowxenopenSUSEThe evtchn_fifo_set_pending function in Xen 4.4.x allows local guest users to cause a denial of...4.9 MediumxenopenSUSEThe set_pixel_format function in ui/vnc.c in QEMU allows remote attackers to cause a denial of...5.0 MediumxenopenSUSEThe sosendto function in slirp/udp.c in QEMU before 2.1.2 allows local users to cause a denial of...2.1 LowxenopenSUSEThe hvm_msr_read_intercept function in arch/x86/hvm/hvm.c in Xen 4.1 through 4.4.x uses an...8.3 HighxenopenSUSEThe VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service ...8.6 HighxenopenSUSECertain MMU virtualization operations in Xen 4.2.x through 4.4.x, when using shadow pagetables,...4.7 MediumxenopenSUSECertain MMU virtualization operations in Xen 4.2.x through 4.4.x before the xsa97-hap patch, when...4.7 MediumxenopenSUSEThe HVMOP_set_mem_type control in Xen 4.1 through 4.4.x allows local guest HVM administrators to...6.7 MediumxenopenSUSEBuffer overflow in scoop_gpio_handler_update in QEMU before 1.7.2 might allow remote attackers to...7.5 HighxenopenSUSEMultiple buffer overflows in the tsc210x_load function in hw/input/tsc210x.c in QEMU before 1.7.2...7.5 HighxenopenSUSEMultiple buffer overflows in the ssd0323_load function in hw/display/ssd0323.c in QEMU before 1.7...7.5 HighxenopenSUSEThe ssi_sd_transfer function in hw/sd/ssi-sd.c in QEMU before 1.7.2 allows remote attackers to...7.5 HighxenopenSUSEBuffer overflow in hw/intc/openpic.c in QEMU before 1.7.2 allows remote attackers to cause a...7.5 HighxenopenSUSEBuffer overflow in the pxa2xx_ssp_load function in hw/arm/pxa2xx.c in QEMU before 1.7.2 allows...7.5 HighxenopenSUSEThe qdisk PV disk backend in qemu-xen in Xen 4.2.x and 4.3.x before 4.3.1, and qemu 1.1 and other...2.7 LowxenopenSUSEXen 3.0.3 through 4.1.x (possibly 4.1.6.1), 4.2.x (possibly 4.2.3), and 4.3.x (possibly 4.3.1)...5.2 MediumxenopenSUSEThe XEN_DOMCTL_getmemlist hypercall in Xen 3.4.x through 4.3.x (possibly 4.3.1) does not always...5.2 MediumxenopenSUSEXen 4.2.x and 4.3.x, when nested virtualization is disabled, does not properly check the...5.7 MediumxenopenSUSEThe Ocaml xenstored implementation (oxenstored) in Xen 4.1.x, 4.2.x, and 4.3.x allows local guest...5.2 MediumxenopenSUSEXen before 4.1.x, 4.2.x, and 4.3.x does not take the page_alloc_lock and grant_table.lock in the...5.2 MediumxenopenSUSEXen 4.3.x writes hypervisor mappings to certain shadow pagetables when live migration is...5.4 MediumxenopenSUSEThe fbld instruction emulation in Xen 3.3.x through 4.3.x does not use the correct variable for...2.1 LowxenopenSUSEXen 4.3.x and earlier does not properly handle certain errors, which allows local HVM guests to...1.5 LowxenopenSUSEXen 4.0 through 4.3.x, when using AVX or LWP capable CPUs, does not properly clear previous data...1.2 LowxenopenSUSEThe qemu guest agent in Qemu 1.4.1 and earlier, as used by Xen, when started in daemon mode, uses...6.9 MediumxenopenSUSEqemu-nbd in QEMU, as used in Xen 4.2.x, determines the format of a raw disk image based on the...3.3 LowxenopenSUSEXen 4.x, when using Intel VT-d for a bus mastering capable PCI device, does not properly check...1.9 LowxenopenSUSECertain page table manipulation operations in Xen 4.1.x, 4.2.x, and earlier are not preemptible,...4.7 MediumxenopenSUSEXen 4.2.x and 4.1.x does not properly restrict access to IRQs, which allows local stub domain...4.7 MediumxenopenSUSEXen 3.1 through 4.x, when running 64-bit hosts on Intel CPUs, does not clear the NT flag when...1.9 LowxenopenSUSEThe do_hvm_op function in xen/arch/x86/hvm/hvm.c in Xen 4.2.x on the x86_32 platform does not...4.6 MediumxenopenSUSEThe AMD IOMMU support in Xen 4.2.x, 4.1.x, 3.3, and other versions, when using AMD-Vi for PCI...4.7 MediumxenopenSUSEXen 4.2.x, 4.1.x, and 4.0, when using Intel VT-d for PCI passthrough, does not properly configure...6.1 MediumxenopenSUSEMemory leak in Xen 4.2 and unstable allows local HVM guests to cause a denial of service (host...4.7 MediumxenopenSUSEBuffer overflow in the e1000_receive function in the e1000 device driver (hw/e1000.c) in QEMU 1.3...9.3 High- Show moreLoading…