Citrix Xenserver vulnerabilities

• citrix hypervisor, xenserver +1 more Potential Denial of Service affecting XenServer and Citrix Hypervisor CVE-2024-5661 6.0 MediumJune 13, 2024
• citrix xenserver Citrix XenServer 4.1, 6.0, 5.6 SP2, 5.6 Feature Pack 1, 5.6 Common Criteria, 5.6, 5.5, 5.0, and 5... CVE-2012-4606 7.8 HighJanuary 23, 2020
• citrix xenserver The Windows Guest Tools in Citrix XenServer 6.2 SP1 and earlier allows remote attackers to cause... CVE-2014-3798 6.5 MediumJuly 11, 2019
• xen, citrix xenserver, debian linux +2 more An issue was discovered in Xen through 4.11.x allowing 64-bit PV guest OS users to cause a denial... CVE-2018-19965 Fix available 5.6 MediumDecember 8, 2018
• xen, citrix xenserver, debian linux +2 more An issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS... CVE-2018-19962 Fix available 7.8 HighDecember 8, 2018
• xen, citrix xenserver, debian linux +2 more An issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS... CVE-2018-19961 Fix available 7.8 HighDecember 8, 2018
• citrix xenserver Citrix XenServer 7.1 and newer allows Directory Traversal. CVE-2018-14007 EPSS 47.3% 9.8 CriticalAugust 15, 2018
• intel corporation core-based microprocessors, canonical ubuntu linux, citrix xenserver +12 more +14 more System software utilizing Lazy FP state restore technique on systems using Intel Core-based... CVE-2018-3665 Fix available 5.6 MediumJune 13, 2018
• debian linux, freebsd, xen +8 more +10 more A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software... CVE-2018-8897 Public exploitFix available EPSS 18.5% 7.8 HighMay 8, 2018
• xen, citrix xenserver, debian linux +2 more arch/x86/mm.c in Xen allows local PV guest OS users to gain host OS privileges via vectors... CVE-2017-12137 Fix available 8.8 HighAugust 24, 2017
• xen, citrix xenserver, debian linux +2 more Race condition in the grant table code in Xen 4.6.x through 4.9.x allows local guest OS... CVE-2017-12136 Fix available 7.8 HighAugust 24, 2017
• xen, citrix xenserver, debian linux +2 more Xen allows local OS guest users to cause a denial of service (crash) or possibly obtain sensitive... CVE-2017-12135 Fix available 8.8 HighAugust 24, 2017
• xen, citrix xenserver +1 more The xen_biovec_phys_mergeable function in drivers/xen/biomerge.c in Xen might allow local OS... CVE-2017-12134 Fix available 8.8 HighAugust 24, 2017
• qemu, citrix xenserver, debian linux +8 more +10 more Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is... CVE-2017-2620 Fix available 5.5 MediumFebruary 22, 2017
• qemu, citrix xenserver, debian linux +8 more +10 more Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an... CVE-2017-2615 Fix available 5.5 MediumFebruary 1, 2017
• citrix xenserver An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7.0. An... CVE-2017-5573 4.9 MediumJanuary 30, 2017
• citrix xenserver An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7.0. An... CVE-2017-5572 6.5 MediumJanuary 30, 2017
• qemu, citrix xenserver, debian linux +7 more +9 more A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display... CVE-2016-9603 Fix available 5.5 MediumDecember 31, 2016
• xen, citrix xenserver +1 more VMFUNC emulation in Xen 4.6.x through 4.8.x on x86 systems using AMD virtualization extensions ... CVE-2016-10025 Fix available 5.5 MediumDecember 21, 2016
• xen, citrix xenserver +1 more Xen through 4.8.x allows local x86 PV guest OS kernel administrators to cause a denial of service... CVE-2016-10024 Fix available 6.0 MediumDecember 21, 2016
• citrix xenserver The (1) ioport_read and (2) ioport_write functions in Xen, when qemu is used as a device model... CVE-2016-9637 Fix available 7.5 HighDecember 7, 2016
• xen, citrix xenserver +1 more The x86 segment base write emulation functionality in Xen 4.4.x through 4.7.x allows local x86 PV... CVE-2016-9385 Fix available 6.0 MediumDecember 7, 2016
• xen, citrix xenserver +1 more The x86 emulator in Xen does not properly treat x86 NULL segments as unusable when accessing... CVE-2016-9386 Fix available 7.8 HighNovember 24, 2016
• xen, citrix xenserver +1 more Xen, when running on a 64-bit hypervisor, allows local x86 guest OS users to modify arbitrary... CVE-2016-9383 Fix available 8.8 HighNovember 24, 2016
• xen, citrix xenserver +1 more Xen 4.0.x through 4.7.x mishandle x86 task switches to VM86 mode, which allows local 32-bit x86... CVE-2016-9382 Fix available 7.8 HighNovember 24, 2016
• qemu, citrix xenserver +1 more Race condition in QEMU in Xen allows local x86 HVM guest OS administrators to gain privileges by... CVE-2016-9381 Fix available 7.5 HighNovember 24, 2016
• xen, citrix xenserver +1 more The pygrub boot loader emulator in Xen, when nul-delimited output format is requested, allows... CVE-2016-9380 Fix available 7.5 HighNovember 24, 2016
• xen, citrix xenserver +1 more The pygrub boot loader emulator in Xen, when S-expression output format is requested, allows... CVE-2016-9379 Fix available 7.9 HighNovember 24, 2016
• xen, citrix xenserver +1 more Xen 4.5.x through 4.7.x do not implement Supervisor Mode Access Prevention (SMAP) whitelisting in... CVE-2016-6259 Fix available 6.2 MediumAugust 2, 2016
• xen, citrix xenserver +1 more The PV pagetable code in arch/x86/mm.c in Xen 4.7.x and earlier allows local 32-bit PV guest OS... CVE-2016-6258 Fix available 8.8 HighJuly 27, 2016
• citrix xenserver Citrix XenServer 7.0 before Hotfix XS70E003, when a deployment has been upgraded from an earlier... CVE-2016-5302 9.8 CriticalJune 13, 2016
• qemu, canonical ubuntu linux, citrix xenserver +8 more +10 more Integer overflow in the VGA module in QEMU allows local guest OS users to cause a denial of... CVE-2016-3712 Fix available 5.5 MediumMay 9, 2016
• qemu, canonical ubuntu linux, citrix xenserver +11 more +13 more The VGA module in QEMU improperly performs bounds checking on banked access to video memory,... CVE-2016-3710 Fix available 8.8 HighMay 9, 2016
• xen, citrix xenserver +1 more Xen 4.6.x, 4.5.x, 4.4.x, 4.3.x, and earlier do not initialize x86 FPU stack and XMM registers... CVE-2015-8555 Fix available 8.6 HighMarch 7, 2016
• xen, citrix xenserver +1 more The paging_invlpg function in include/asm-x86/paging.h in Xen 3.3.x through 4.6.x, when using... CVE-2016-1571 Fix available 6.3 MediumJanuary 22, 2016
• ntp, citrix xenserver, netapp clustered data ontap +5 more +7 more The rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote... CVE-2015-7705 Fix available EPSS 12.2% 9.8 CriticalOctober 22, 2015
• ntp, citrix xenserver, debian linux +11 more +13 more The ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to... CVE-2015-7704 Fix available EPSS 10.7% 7.5 HighOctober 22, 2015
• qemu, canonical ubuntu linux, citrix xenserver +5 more +7 more QEMU does not properly restrict write access to the PCI config space for certain PCI pass-through... CVE-2015-4106 Fix available 4.6 MediumJune 3, 2015
• citrix xenserver Unspecified vulnerability in Citrix XenServer 6.2 Service Pack 1 and earlier allows attackers to... CVE-2014-4948 6.4 MediumJuly 22, 2014
• citrix xenserver Buffer overflow in the HVM graphics console support in Citrix XenServer 6.2 Service Pack 1 and... CVE-2014-4947 10.0 HighJuly 22, 2014
• citrix xenserver Array index error in the HVMOP_set_mem_access handler in Xen 4.1 allows local HVM guest OS... CVE-2012-5512 Fix available 3.2 LowDecember 13, 2012
• citrix xenserver, xen +1 more The GNTTABOP_swap_grant_ref sub-operation in the grant table hypercall in Xen 4.2 and Citrix... CVE-2012-3516 6.9 MediumNovember 23, 2012
• citrix xenserver, xen +1 more PHYSDEVOP_map_pirq in Xen 4.1 and 4.2 and Citrix XenServer 6.0.2 and earlier allows local HVM... CVE-2012-3498 Fix available 5.6 MediumNovember 23, 2012
• citrix xenserver, xen +1 more The physdev_get_free_pirq hypercall in arch/x86/physdev.c in Xen 4.1.x and Citrix XenServer 6.0.2... CVE-2012-3495 Fix available 6.1 MediumNovember 23, 2012
• citrix xenserver, xen +1 more XENMEM_populate_physmap in Xen 4.0, 4.1, and 4.2, and Citrix XenServer 6.0.2 and earlier, when... CVE-2012-3496 Fix available 4.7 MediumSeptember 8, 2012
• citrix xenserver, xen +1 more The set_debugreg hypercall in include/asm-x86/debugreg.h in Xen 4.0, 4.1, and 4.2, and Citrix... CVE-2012-3494 Fix available 2.1 LowSeptember 8, 2012
• citrix xenserver, freebsd, illumos +8 more +10 more The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer... CVE-2012-0217 Public exploitFix available EPSS 39.6% 7.2 HighJune 12, 2012
• citrix xenserver Citrix XenServer 5.0 Update 2 and earlier, and 5.5 Update 1 and earlier, when using a pvops... CVE-2010-2619 1.9 LowJuly 2, 2010
• citrix xenserver Unspecified vulnerability in Citrix XenServer 5.0 Update 3 and earlier, and 5.5, allows local... CVE-2010-0633 4.6 MediumFebruary 12, 2010
• citrix xenserver Cross-site scripting (XSS) vulnerability in the XenAPI HTTP interfaces in Citrix XenServer... CVE-2008-3253 4.3 MediumJuly 22, 2008