Skip to contentXen vulnerabilities
Newest
- xen, citrix xenserver +1 moreThe PV pagetable code in arch/x86/mm.c in Xen 4.7.x and earlier allows local 32-bit PV guest OS...CVE-2016-6258Fix available8.8 High
- xenThe p2m_teardown function in arch/arm/p2m.c in Xen 4.4.x through 4.6.x allows local guest OS...CVE-2016-5242Fix available5.6 Medium
- xenThe libxl device-handling in Xen through 4.6.x allows local guest OS users with access to the...CVE-2016-4963Fix available4.7 Medium
- xen, oracle vm server +1 moreThe libxl device-handling in Xen 4.6.x and earlier allows local OS guest administrators to cause...CVE-2016-4962Fix available6.7 Medium
- redhat libvirt, xen +1 moreThe qemu implementation in libvirt before 1.3.0 and Xen allows local guest OS users to cause a...CVE-2014-3672Fix available6.5 Medium
- xen, oracle vm server +1 moreThe guest_walk_tables function in arch/x86/mm/guest_walk.c in Xen 4.6.x and earlier does not...CVE-2016-4480Fix available8.4 High
- xen, fedoraproject fedora, oracle vm server +2 moreInteger overflow in the x86 shadow pagetable code in Xen allows local guest OS users to cause a...CVE-2016-3960Fix available8.8 High
- xen, canonical ubuntu linux +1 moreXen and the Linux kernel through 4.5.x do not properly suppress hugetlbfs support in x86 PV...CVE-2016-3961Fix available5.5 Medium
- xen, debian linux, fedoraproject fedora +1 more +3 moreThe fpu_fxrstor function in arch/x86/i387.c in Xen 4.x does not properly handle writes to the...CVE-2016-3159Fix available3.8 Low
- xen, fedoraproject fedora, oracle vm server +2 moreThe xrstor function in arch/x86/xstate.c in Xen 4.x does not properly handle writes to the...CVE-2016-3158Fix available3.8 Low
- xen, redhat enterprise linux +1 moreXen allows guest OS users to obtain sensitive information from uninitialized locations in host OS...CVE-2015-8553Fix available6.5 Medium
- xen, canonical ubuntu linux +1 moreThe __switch_to function in arch/x86/kernel/process_64.c in the Linux kernel does not properly...CVE-2016-3157Fix available7.8 High
- xenBuffer overflow in hw/pt-msi.c in Xen 4.6.x and earlier, when using the qemu-xen-traditional (aka...CVE-2015-8554Fix available7.5 High
- xen, citrix xenserver +1 moreXen 4.6.x, 4.5.x, 4.4.x, 4.3.x, and earlier do not initialize x86 FPU stack and XMM registers...CVE-2015-8555Fix available8.6 High
- xenVMX in Xen 4.6.x and earlier, when using an Intel or Cyrix CPU, allows local HVM guest users to...CVE-2016-2271Fix available5.5 Medium
- xen, debian linux, fedoraproject fedora +1 more +3 moreXen 4.6.x and earlier allows local guest administrators to cause a denial of service (host reboot...CVE-2016-2270Fix available6.8 Medium
- xen, citrix xenserver +1 moreThe paging_invlpg function in include/asm-x86/paging.h in Xen 3.3.x through 4.6.x, when using...CVE-2016-1571Fix available6.3 Medium
- xenThe PV superpage functionality in arch/x86/mm.c in Xen 3.4.0, 3.4.1, and 4.1.x through 4.6.x...CVE-2016-1570Fix available8.5 High
- xenThe hvm_set_callback_via function in arch/x86/hvm/irq.c in Xen 4.6 does not limit the number of...CVE-2015-8615Fix available5.0 Medium
- xenThe libxl toolstack library in Xen 4.1.x through 4.6.x does not properly release mappings of...CVE-2015-8341Fix available7.8 High
- xenThe memory_exchange function in common/memory.c in Xen 3.2.x through 4.6.x does not properly...CVE-2015-8340Fix available4.7 Medium
- xenThe memory_exchange function in common/memory.c in Xen 3.2.x through 4.6.x does not properly hand...CVE-2015-8339Fix available4.7 Medium
- xenXen 4.6.x and earlier does not properly enforce limits on page order inputs for the (1)...CVE-2015-8338Fix available7.2 High
- debian linux, xen, canonical ubuntu linux +2 more +4 moreThe PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x...CVE-2015-8552Fix available4.4 Medium
- xen, novell suse linux enterprise real time extension +1 moreXen, when used on a system providing PV backends, allows local guest OS administrators to cause a...CVE-2015-8550Public exploitFix available8.2 High
- qemu, debian linux, xen +2 moreHeap-based buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU allows guest...CVE-2015-7504Fix available8.8 High
- xenThe hypercall_create_continuation function in arch/arm/domain.c in Xen 4.4.x through 4.6.x allows...CVE-2015-7812Fix available4.9 Medium
- debian linux, linux kernel, xen +3 more +5 moreThe KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS...CVE-2015-8104Fix available4.7 Medium
- debian linux, linux kernel, xen +2 more +4 moreThe KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS...CVE-2015-5307Fix available4.9 Medium
- xenThe (1) libxl_set_memory_target function in tools/libxl/libxl.c and (2) libxl__build_post...CVE-2015-7972Fix available2.1 Low
- xenThe p2m_pod_emergency_sweep function in arch/x86/mm/p2m-pod.c in Xen 3.4.x, 3.5.x, and 3.6.x is...CVE-2015-7970Fix available4.9 Medium
- xenRace condition in the relinquish_memory function in arch/arm/domain.c in Xen 4.6.x and earlier...CVE-2015-7814Fix available4.7 Medium
- xenXen 4.4.x, 4.5.x, and 4.6.x does not limit the number of printk console messages when reporting...CVE-2015-7813Fix available2.1 Low
- xenXen 3.2.x through 4.6.x does not limit the number of printk console messages when logging certain...CVE-2015-7971Fix available2.1 Low
- xenMultiple memory leaks in Xen 4.0 through 4.6.x allow local guest administrators or domains with...CVE-2015-7969Fix available4.9 Medium
- xenThe mod_l2_entry function in arch/x86/mm.c in Xen 3.4 through 4.6.x does not properly validate...CVE-2015-7835Fix available7.2 High
- xenlibxl in Xen 4.1.x through 4.6.x does not properly handle the readonly flag on disks when using...CVE-2015-7311Fix available3.6 Low
- qemu, arista eos, canonical ubuntu linux +8 more +10 moreThe process_tx_desc function in hw/net/e1000.c in QEMU before 2.4.0.1 does not properly process...CVE-2015-6815Fix available3.5 Low
- xenThe xenmem_add_to_physmap_one function in arch/arm/mm.c in Xen 4.5.x, 4.4.x, and earlier does not...CVE-2015-6654Fix available2.1 Low
- xen, fedoraproject fedora +1 moreUse-after-free vulnerability in QEMU in Xen 4.5.x and earlier does not completely unplug emulated...CVE-2015-5166Fix available7.2 High
- xen, arista eos, debian linux +20 more +22 moreThe C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4...CVE-2015-5165Fix availableEPSS 13.3%9.3 High
- qemu, xen, fedoraproject fedora +4 more +6 moreHeap-based buffer overflow in the IDE subsystem in QEMU, as used in Xen 4.5.x and earlier, when...CVE-2015-5154Fix available7.2 High
- xenStack-based buffer overflow in the xl command line utility in Xen 4.1.x through 4.5.x allows...CVE-2015-3259Fix available6.8 Medium
- xenThe compat_iret function in Xen 3.1 through 4.5 iterates the wrong way through a loop, which...CVE-2015-4164Fix available4.9 Medium
- xenGNTTABOP_swap_grant_ref in Xen 4.2 through 4.5 does not check the grant table operation version,...CVE-2015-4163Fix available4.9 Medium
- xenXen 3.3.x through 4.5.x enables logging for PCI MSI-X pass-through error messages, which allows...CVE-2015-4105Fix available4.9 Medium
- xenXen 3.3.x through 4.5.x does not properly restrict access to PCI MSI mask bits, which allows...CVE-2015-4104Fix available7.8 High
- xenXen 3.3.x through 4.5.x does not properly restrict write access to the host MSI message data...CVE-2015-4103Fix available4.9 Medium
- xen, fedoraproject fedora +1 moreThe XEN_DOMCTL_memory_mapping hypercall in Xen 3.2.x through 4.5.x, when using a PCI passthrough...CVE-2015-2752Fix available4.9 Medium
- xen, fedoraproject fedora +1 moreXen 4.3.x, 4.4.x, and 4.5.x, when using toolstack disaggregation, allows remote domains with...CVE-2015-2751Fix available7.1 High
- Show moreLoading…