Skip to contentXen vulnerabilities
Newest
- xen, canonical ubuntu linux, debian linux +1 more +3 moreQEMU, as used in Xen 3.3.x through 4.5.x, does not properly restrict access to PCI command...CVE-2015-2756Fix available4.9 Medium
- xen, fedoraproject fedora +1 moreXen 4.5.x and earlier enables certain default backends when emulating a VGA device for an x86 HVM...CVE-2015-2152Fix available1.9 Low
- xen, debian linux, fedoraproject fedora +2 moreThe x86 emulator in Xen 3.2.x through 4.5.x does not properly ignore segment overrides for...CVE-2015-2151Fix available7.2 High
- xen, debian linux, fedoraproject fedora +2 moreThe HYPERVISOR_xen_version hypercall in Xen 3.2.x through 4.5.x does not properly initialize data...CVE-2015-2045Fix available2.1 Low
- xenThe emulation routines for unspecified X86 devices in Xen 3.2.x through 4.5.x does not properly...CVE-2015-2044Fix available2.1 Low
- xenThe vgic_v2_to_sgi function in arch/arm/vgic-v2.c in Xen 4.5.x, when running on ARM hardware with...CVE-2015-02684.9 Medium
- xen, fedoraproject fedora +1 moreThe ARM GIC distributor virtualization in Xen 4.4.x and 4.5.x allows local guests to cause a...CVE-2015-1563Fix available2.1 Low
- xenThe evtchn_fifo_set_pending function in Xen 4.4.x allows local guest users to cause a denial of...CVE-2014-6268Fix available4.9 Medium
- xen, opensuse +1 moreUse-after-free vulnerability in Xen 4.2.x, 4.3.x, and 4.4.x allows remote domains to cause a...CVE-2015-0361Fix available7.8 High
- xen, opensuse +1 moreXen 4.4.x and earlier, when using a large number of VCPUs, does not properly handle read and...CVE-2014-9066Fix available4.7 Medium
- xen, opensuse +1 morecommon/spinlock.c in Xen 4.4.x and earlier does not properly handle read and write locks, which...CVE-2014-9065Fix available4.4 Medium
- xenXen 4.4.x, when running on an ARM system and "handling an unknown system register access from 64...CVE-2014-5148Fix available4.6 Medium
- xenThe hvm_msr_read_intercept function in arch/x86/hvm/hvm.c in Xen 4.1 through 4.4.x uses an...CVE-2014-7188Fix available8.3 High
- linux kernel, xen, ubuntu +2 moreXen 3.3.x through 4.5.x and the Linux kernel through 3.19.1 do not properly restrict access to...CVE-2015-2150Fix available4.9 Medium
- xendrivers/xen/usbback/usbback.c in linux-2.6.18-xen-3.4.0 (aka the Xen 3.4.x support patches for...CVE-2015-07772.1 Low
- xenXen 4.4.x, when running a 64-bit kernel on an ARM system, does not properly handle traps from the...CVE-2014-5147Fix available4.3 Medium
- xen, opensuse +1 moreCertain MMU virtualization operations in Xen 4.2.x through 4.4.x, when using shadow pagetables,...CVE-2014-5149Fix available4.7 Medium
- xen, opensuse +1 moreCertain MMU virtualization operations in Xen 4.2.x through 4.4.x before the xsa97-hap patch, when...CVE-2014-5146Fix available4.7 Medium
- xenThe alloc_domain_struct function in arch/arm/domain.c in Xen 4.4.x, when running on an ARM...CVE-2014-4022Fix available2.7 Low
- xenXen 4.4.x, when running on an ARM system, does not properly check write permissions on virtual...CVE-2014-3969Fix available7.4 High
- xen, opensuse +1 moreThe HVMOP_inject_msi function in Xen 4.2.x, 4.3.x, and 4.4.x allows local guest HVM...CVE-2014-3968Fix available5.5 Medium
- xen, opensuse +1 moreThe HVMOP_inject_msi function in Xen 4.2.x, 4.3.x, and 4.4.x does not properly check the return...CVE-2014-3967Fix available5.5 Medium
- xenXen 4.4.x does not properly validate the load address for 64-bit ARM guest kernels, which allows...CVE-2014-3717Fix available3.3 Low
- xenXen 4.4.x does not properly check alignment, which allows local users to cause a denial of...CVE-2014-3716Fix available1.9 Low
- xenBuffer overflow in Xen 4.4.x allows local users to read system memory or cause a denial of...CVE-2014-3715Fix available3.3 Low
- xenThe ARM image loading functionality in Xen 4.4.x does not properly validate kernel length, which...CVE-2014-3714Fix available3.3 Low
- xenThe HVMOP_set_mem_type control in Xen 4.1 through 4.4.x allows local guest HVM administrators to...CVE-2014-3124Fix available6.7 Medium
- xenXen 4.4.x, when running on an ARM system, does not properly context switch the CNTKCTL_EL1...CVE-2014-3125Fix available6.2 Medium
- xenThe vgic_distr_mmio_write function in the virtual guest interrupt controller (GIC) distributor ...CVE-2014-2986Fix available5.5 Medium
- xenXen 4.4.x, when running on ARM systems, does not properly restrict access to hardware features,...CVE-2014-2915Fix available5.5 Medium
- xenThe netback driver in Xen, when using certain Linux versions that do not allow sleeping in...CVE-2014-2580Fix available4.4 Medium
- xenThe (1) do_send and (2) do_recv functions in io.c in libvchan in Xen 4.2.x, 4.3.x, and 4.4-RC...CVE-2014-1896Fix available4.9 Medium
- xenOff-by-one error in the flask_security_avc_cachestats function in xsm/flask/flask_op.c in Xen 4.2...CVE-2014-1895Fix available5.8 Medium
- xenMultiple integer overflows in unspecified suboperations in the flask hypercall in Xen 3.2.x and...CVE-2014-18945.2 Medium
- xenMultiple integer overflows in the (1) FLASK_GETBOOL and (2) FLASK_SETBOOL suboperations in the...CVE-2014-18935.2 Medium
- xenXen 3.3 through 4.1, when XSM is enabled, allows local users to cause a denial of service via...CVE-2014-18925.2 Medium
- xenMultiple integer overflows in the (1) FLASK_GETBOOL, (2) FLASK_SETBOOL, (3) FLASK_USER, and (4)...CVE-2014-18915.2 Medium
- qemu, xen, redhat enterprise linux +2 moreBuffer overflow in hw/scsi-disk.c in the SCSI subsystem in QEMU before 0.15.2, as used by Xen,...CVE-2011-3346Fix available4.0 Medium
- xenThe HVMOP_set_mem_access HVM control operations in Xen 4.1.x for 32-bit and 4.1.x through 4.4.x...CVE-2014-2599Fix available4.9 Medium
- xenUse-after-free vulnerability in the xc_cpupool_getinfo function in Xen 4.1.x through 4.3.x, when...CVE-2014-1950Fix available4.6 Medium
- xenThe do_physdev_op function in Xen 4.1.5, 4.1.6.1, 4.2.2 through 4.2.3, and 4.3.x does not...CVE-2014-1666Fix available8.3 High
- xenThe IRQ setup in Xen 4.2.x and 4.3.x, when using device passthrough and configured to support a...CVE-2014-1642Fix available4.4 Medium
- qemu, xen +1 moreThe qdisk PV disk backend in qemu-xen in Xen 4.2.x and 4.3.x before 4.3.1, and qemu 1.1 and other...CVE-2013-4375Fix available2.7 Low
- xenXen, when using x86 Intel processors and the VMX virtualization extension is enabled, does not...CVE-2011-19364.6 Medium
- xenThe instruction emulation in Xen 3.0.3 allows local SMP guest users to cause a denial of service ...CVE-2011-17806.1 Medium
- xenThe get_free_port function in Xen allows local authenticated DomU users to cause a denial of...CVE-2011-17637.7 High
- xen, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreXen in the Linux kernel, when running a guest on a host without hardware assisted paging (HAP),...CVE-2011-25195.5 Medium
- xenXen 3.0.3 through 4.1.x (possibly 4.1.6.1), 4.2.x (possibly 4.2.3), and 4.3.x (possibly 4.3.1)...CVE-2013-45545.2 Medium
- xenThe XEN_DOMCTL_getmemlist hypercall in Xen 3.4.x through 4.3.x (possibly 4.3.1) does not always...CVE-2013-4553Fix available5.2 Medium
- xenXen 4.2.x and 4.3.x, when using Intel VT-d and a PCI device has been assigned, does not clear the...CVE-2013-6400Fix available6.8 Medium
- Show moreLoading…