Skip to content

Xen vulnerabilities

Products

Newest

xen(1) TMEMC_SAVE_GET_CLIENT_WEIGHT, (2) TMEMC_SAVE_GET_CLIENT_CAP, (3) TMEMC_SAVE_GET_CLIENT_FLAGS...CVE-2012-3497Fix available6.9 MediumNovember 23, 2012
citrix xenserver, xen +1 moreThe physdev_get_free_pirq hypercall in arch/x86/physdev.c in Xen 4.1.x and Citrix XenServer 6.0.2...CVE-2012-3495Fix available6.1 MediumNovember 23, 2012
xen, debian linux, fedoraproject fedora +4 more +6 moreXen 4.2.x through 4.5.x does not initialize certain fields, which allows certain remote service...CVE-2015-3340Fix available2.9 LowNovember 22, 2012
xen, debian linux, opensuse +2 moreThe do_mmu_update function in arch/x86/mm.c in Xen 3.2.x through 4.4.x does not properly manage...CVE-2014-9030Fix available7.1 HighNovember 22, 2012
xen, debian linux, opensuse +2 more +4 moreThe acceleration support for the "REP MOVS" instruction in Xen 4.4.x, 3.2.x, and earlier lacks...CVE-2014-8867Fix available4.9 MediumNovember 22, 2012
xen, debian linux, opensuse +2 moreThe compatibility mode hypercall argument translation in Xen 3.3.x through 4.4.x, when running on...CVE-2014-8866Fix available4.7 MediumNovember 22, 2012
xen, debian linux, opensuse +2 morearch/x86/x86_emulate/x86_emulate.c in Xen 3.2.1 through 4.4.x does not properly check privileges,...CVE-2014-8595Fix available1.9 LowNovember 22, 2012
xen, debian linux, opensuse +2 moreThe do_mmu_update function in arch/x86/mm.c in Xen 4.x through 4.4.x does not properly restrict...CVE-2014-8594Fix available5.4 MediumNovember 22, 2012
xenThe x86_emulate function in arch/x86/x86_emulate/x86_emulate.c in Xen 3.3.x through 4.4.x does...CVE-2014-7156Fix available3.3 LowNovember 22, 2012
xen, debian linux, fedoraproject fedora +1 more +3 moreThe x86_emulate function in arch/x86/x86_emulate/x86_emulate.c in Xen 4.4.x and earlier does not...CVE-2014-7155Fix available5.8 MediumNovember 22, 2012
xen, debian linux, fedoraproject fedora +1 more +3 moreRace condition in HVMOP_track_dirty_vram in Xen 4.0.0 through 4.4.x does not ensure possession of...CVE-2014-7154Fix available6.1 MediumNovember 22, 2012
xenXen 3.2.x through 4.4.x does not properly clean memory pages recovered from guests, which allows...CVE-2014-4021Fix available2.7 LowNovember 22, 2012
xen, opensuse +1 moreThe Intel VT-d Interrupt Remapping engine in Xen 3.3.x through 4.3.x allows local guests to cause...CVE-2013-3495Fix available4.7 MediumNovember 22, 2012
xenThe (1) XENMEM_decrease_reservation, (2) XENMEM_populate_physmap, and (3) XENMEM_exchange...CVE-2012-5515Fix available4.7 MediumNovember 22, 2012
xenThe guest_physmap_mark_populate_on_demand function in Xen 4.2 and earlier does not properly...CVE-2012-5514Fix available4.7 MediumNovember 22, 2012
xenThe XENMEM_exchange handler in Xen 4.2 and earlier does not properly check the memory address,...CVE-2012-5513Fix available6.9 MediumNovember 22, 2012
xenStack-based buffer overflow in the dirty video RAM tracking functionality in Xen 3.4 through 4.1...CVE-2012-5511Fix available4.7 MediumNovember 22, 2012
xenXen 4.x, when downgrading the grant table version, does not properly remove the status page from...CVE-2012-5510Fix available4.7 MediumNovember 22, 2012
xenXen 4.0 through 4.2, when running 32-bit x86 PV guests on 64-bit hypervisors, allows local guest...CVE-2012-4539Fix available2.1 LowNovember 21, 2012
xenXen 3.4 through 4.2, and possibly earlier versions, does not properly synchronize the p2m and m2p...CVE-2012-4537Fix available2.1 LowNovember 21, 2012
xenThe (1) domain_pirq_to_emuirq and (2) physdev_unmap_pirq functions in Xen 2.2 allows local guest...CVE-2012-4536Fix available2.1 LowNovember 21, 2012
xenXen 3.4 through 4.2, and possibly earlier versions, allows local guest OS administrators to cause...CVE-2012-4535Fix available1.9 LowNovember 21, 2012
xenThe PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk ...CVE-2012-4544Fix available2.1 LowOctober 31, 2012
xen, xen xen-unstable +1 moreThe PyGrub boot loader in Xen unstable before changeset 25589:60f09d1ab1fe, 4.2.x, and 4.1.x...CVE-2012-2625Fix available2.7 LowOctober 31, 2012
xenThe graphical console in Xen 4.0, 4.1 and 4.2 allows local OS guest administrators to obtain...CVE-2012-4411Fix available4.6 MediumSeptember 8, 2012
citrix xenserver, xen +1 moreXENMEM_populate_physmap in Xen 4.0, 4.1, and 4.2, and Citrix XenServer 6.0.2 and earlier, when...CVE-2012-3496Fix available4.7 MediumSeptember 8, 2012
citrix xenserver, xen +1 moreThe set_debugreg hypercall in include/asm-x86/debugreg.h in Xen 4.0, 4.1, and 4.2, and Citrix...CVE-2012-3494Fix available2.1 LowSeptember 8, 2012
qemu, xen, redhat enterprise linux +2 more +4 moreThe Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local...CVE-2015-3456Public exploitFix availableEPSS 15.3%7.7 HighAugust 31, 2012
qemu, xen, canonical ubuntu linux +10 more +12 moreQemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a...CVE-2012-3515Fix available7.2 HighAugust 31, 2012
xenXen 4.0 and 4.1 allows local HVM guest OS kernels to cause a denial of service (domain 0 VCPU...CVE-2012-3433Fix available4.9 MediumAugust 18, 2012
xenThe handle_mmio function in arch/x86/hvm/io.c in the MMIO operations emulator for Xen 3.3 and 4.x...CVE-2012-3432Fix available1.9 LowAugust 18, 2012
xenXen 4.0, and 4.1, when running a 64-bit PV guest on "older" AMD CPUs, does not properly protect...CVE-2012-2934Fix available1.9 LowJune 24, 2012
xenXen 3.4, 4.0, and 4.1, when the guest OS has not registered a handler for a syscall or sysenter...CVE-2012-0218Fix available1.9 LowJune 24, 2012
citrix xenserver, freebsd, illumos +8 more +10 moreThe x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer...CVE-2012-0217Public exploitFix availableEPSS 39.6%7.2 HighJune 12, 2012
linux kernel, xen +1 moreThe pciback_enable_msi function in the PCI backend driver (drivers/xen/pciback...CVE-2013-0231Fix available4.9 MediumApril 24, 2012
xenXen, possibly before 4.0.2, allows local 64-bit PV guests to cause a denial of service (host...CVE-2011-1166Fix available5.5 MediumNovember 6, 2011
xenThe pyGrub boot loader in Xen 3.0.3, 3.3.0, and Xen-3.3.1 does not support the password option in...CVE-2009-3525Public exploitFix available7.2 HighOctober 5, 2009
xenThe hypervisor_callback function in Xen, possibly before 3.4.0, as applied to the Linux kernel 2...CVE-2009-17585.0 MediumMay 22, 2009
xenqemu-dm.debug in Xen 3.2.1 allows local users to overwrite arbitrary files via a symlink attack...CVE-2008-49936.9 MediumNovember 7, 2008
xen, xen flask module +1 moreHeap-based buffer overflow in the flask_security_label function in Xen 3.3, when compiled with...CVE-2008-36876.8 MediumAugust 14, 2008
xenThe copy_to_user function in the PAL emulation functionality for Xen 3.1.2 and earlier, when...CVE-2007-64164.6 MediumDecember 17, 2007
xen qemuThe VNC server implementation in QEMU, as used by Xen and possibly other environments, allows...CVE-2007-0998Fix available4.3 MediumMarch 20, 2007