Skip to contentXen vulnerabilities
Newest
- xen, opensuse +1 moreXen 4.2.x and 4.3.x, when using Intel VT-d for PCI passthrough, does not properly flush the TLB...CVE-2013-6375Fix available7.9 High
- xenXen 4.2.x and 4.3.x, when nested virtualization is disabled, does not properly check the...CVE-2013-4551Fix available5.7 Medium
- xenThe Ocaml xenstored implementation (oxenstored) in Xen 4.1.x, 4.2.x, and 4.3.x allows local guest...CVE-2013-44165.2 Medium
- xen, debian linux +1 moreXen before 4.1.x, 4.2.x, and 4.3.x does not take the page_alloc_lock and grant_table.lock in the...CVE-2013-4494Fix available5.2 Medium
- xenUse-after-free vulnerability in the libxl_list_cpupool function in the libxl toolstack library in...CVE-2013-4371Fix available4.4 Medium
- xenThe ocaml binding for the xc_vcpu_getaffinity function in Xen 4.2.x and 4.3.x frees certain...CVE-2013-4370Fix available4.6 Medium
- xenThe xlu_vif_parse_rate function in the libxlu library in Xen 4.2.x and 4.3.x allows local users...CVE-2013-4369Fix available1.9 Low
- xenThe outs instruction emulation in Xen 3.1.x, 4.2.x, 4.3.x, and earlier, when using FS: or GS:...CVE-2013-4368Fix available1.9 Low
- xenXen 4.3.x writes hypervisor mappings to certain shadow pagetables when live migration is...CVE-2013-4356Fix available5.4 Medium
- xenThe fbld instruction emulation in Xen 3.3.x through 4.3.x does not use the correct variable for...CVE-2013-4361Fix available2.1 Low
- xenXen 4.3.x and earlier does not properly handle certain errors, which allows local HVM guests to...CVE-2013-4355Fix available1.5 Low
- xenOff-by-one error in the __addr_ok macro in Xen 3.3 and earlier allows local 64 bit PV guest...CVE-2011-29015.5 Medium
- xenXen 4.0 through 4.3.x, when using AVX or LWP capable CPUs, does not properly clear previous data...CVE-2013-1442Fix available1.2 Low
- xenThe xenlight library (libxl) in Xen 4.0.x through 4.2.x, when IOMMU is disabled, provides access...CVE-2013-4329Fix available6.5 Medium
- xenThe vmx_set_uc_mode function in Xen 3.3 through 4.3, when disabling caches, allows local HVM...CVE-2013-2212Fix available5.7 Medium
- xenThe libxenlight (libxl) toolstack library in Xen 4.0.x, 4.1.x, and 4.2.x uses weak permissions...CVE-2013-2211Fix available7.4 High
- xenMultiple unspecified vulnerabilities in the Elf parser (libelf) in Xen 4.2.x and earlier allow...CVE-2013-2196Fix available6.9 Medium
- xenThe Elf parser (libelf) in Xen 4.2.x and earlier allow local guest administrators with certain...CVE-2013-2195Fix available6.9 Medium
- xenMultiple integer overflows in the Elf parser (libelf) in Xen 4.2.x and earlier allow local guest...CVE-2013-2194Fix available6.9 Medium
- xenXen 4.0.2 through 4.0.4, 4.1.x, and 4.2.x allows local PV guest users to cause a denial of...CVE-2013-2078Fix available4.7 Medium
- xenXen 4.0.x, 4.1.x, and 4.2.x does not properly restrict the contents of a XRSTOR, which allows...CVE-2013-2077Fix available5.2 Medium
- xenXen 4.0.x, 4.1.x, and 4.2.x, when running on AMD64 processors, only save/restore the FOP, FIP,...CVE-2013-2076Fix available4.3 Medium
- xen, debian linux +1 moreBuffer overflow in the Python bindings for the xc_vcpu_setaffinity call in Xen 4.0.x, 4.1.x, and...CVE-2013-2072Public exploitFix available7.4 High
- xenXen 4.1.x and 4.2.x, when the XSA-45 patch is in place, does not properly maintain references on...CVE-2013-1432Fix available7.4 High
- xenqemu-nbd in QEMU, as used in Xen 4.2.x, determines the format of a raw disk image based on the...CVE-2013-1922Fix available3.3 Low
- xenXen 4.0.x and 4.1.x incorrectly releases a grant reference when releasing a non-v1, non...CVE-2013-1964Fix available6.9 Medium
- xenXen 4.x, when using Intel VT-d for a bus mastering capable PCI device, does not properly check...CVE-2013-1952Fix available1.9 Low
- xenCertain page table manipulation operations in Xen 4.1.x, 4.2.x, and earlier are not preemptible,...CVE-2013-1918Fix available4.7 Medium
- xenXen 4.2.x and 4.1.x does not properly restrict access to IRQs, which allows local stub domain...CVE-2013-1919Fix available4.7 Medium
- xenXen 3.1 through 4.x, when running 64-bit hosts on Intel CPUs, does not clear the NT flag when...CVE-2013-1917Fix available1.9 Low
- xenXen 4.2.x, 4.1.x, and earlier, when the hypervisor is running "under memory pressure" and the Xen...CVE-2013-19204.4 Medium
- xenoxenstored in Xen 4.1.x, Xen 4.2.x, and xen-unstable does not properly consider the state of the...CVE-2013-02154.3 Medium
- xenThe do_hvm_op function in xen/arch/x86/hvm/hvm.c in Xen 4.2.x on the x86_32 platform does not...CVE-2013-01514.6 Medium
- xenThe AMD IOMMU support in Xen 4.2.x, 4.1.x, 3.3, and other versions, when using AMD-Vi for PCI...CVE-2013-0153Fix available4.7 Medium
- xenXen 4.2.x, 4.1.x, and 4.0, when using Intel VT-d for PCI passthrough, does not properly configure...CVE-2012-5634Fix available6.1 Medium
- xenMemory leak in Xen 4.2 and unstable allows local HVM guests to cause a denial of service (host...CVE-2013-01524.7 Medium
- xenThe get_page_type function in xen/arch/x86/mm.c in Xen 4.2, when debugging is enabled, allows...CVE-2013-01541.9 Low
- xenMultiple HVM control operations in Xen 3.4 through 4.2 allow local HVM guest OS administrators to...CVE-2012-6333Fix available4.7 Medium
- xenThe get_page_from_gfn hypercall function in Xen 4.2 allows local PV guest OS administrators to...CVE-2012-55254.7 Medium
- xenXen 4.1.1 and earlier allows local guest OS kernels with control of a PCI[E] device to cause a...CVE-2011-3131Fix available4.6 Medium
- xenThe HVMOP_pagetable_dying hypercall in Xen 4.0, 4.1, and 4.2 does not properly check the...CVE-2012-4538Fix available4.9 Medium
- xenThe (1) memc_save_get_next_page, (2) tmemc_restore_put_page and (3) tmemc_restore_flush_page...CVE-2012-6036Fix available4.4 Medium
- xenThe do_tmem_destroy_pool function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 does...CVE-2012-6035Fix available6.9 Medium
- xenThe (1) tmemc_save_get_next_page and (2) tmemc_save_get_next_inv functions and the (3)...CVE-2012-6034Fix available4.4 Medium
- xenThe do_tmem_control function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 does not...CVE-2012-6033Fix available4.4 Medium
- xenMultiple integer overflows in the (1) tmh_copy_from_client and (2) tmh_copy_to_client functions...CVE-2012-6032Fix available4.9 Medium
- xenThe do_tmem_get function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 allow local...CVE-2012-6031Fix available4.7 Medium
- xenThe do_tmem_op function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 allow local...CVE-2012-6030Fix available7.2 High
- citrix xenserver, xen +1 moreThe GNTTABOP_swap_grant_ref sub-operation in the grant table hypercall in Xen 4.2 and Citrix...CVE-2012-35166.9 Medium
- citrix xenserver, xen +1 morePHYSDEVOP_map_pirq in Xen 4.1 and 4.2 and Citrix XenServer 6.0.2 and earlier allows local HVM...CVE-2012-3498Fix available5.6 Medium
- Show moreLoading…