Skip to contentXen vulnerabilities
Newest
- xenA domain cleanup issue was discovered in the C xenstore daemon (aka cxenstored) in Xen through 4...CVE-2017-14317Fix available5.6 Medium
- xenA parameter verification issue was discovered in Xen through 4.9.x. The function ...CVE-2017-14316Fix available8.8 High
- xenAn issue was discovered in Xen 4.4.x through 4.9.x allowing ARM guest OS users to cause a denial...CVE-2017-15596Fix available6.0 Medium
- xen, citrix xenserver, debian linux +2 morearch/x86/mm.c in Xen allows local PV guest OS users to gain host OS privileges via vectors...CVE-2017-12137Fix available8.8 High
- xen, citrix xenserver, debian linux +2 moreRace condition in the grant table code in Xen 4.6.x through 4.9.x allows local guest OS...CVE-2017-12136Fix available7.8 High
- xen, citrix xenserver, debian linux +2 moreXen allows local OS guest users to cause a denial of service (crash) or possibly obtain sensitive...CVE-2017-12135Fix available8.8 High
- xen, citrix xenserver +1 moreThe xen_biovec_phys_mergeable function in drivers/xen/biomerge.c in Xen might allow local OS...CVE-2017-12134Fix available8.8 High
- xenXen maintains the _GTF_{read,writ}ing bits as appropriate, to inform the guest that a grant is in...CVE-2017-12855Fix available6.5 Medium
- xenXen through 4.8.x does not validate a vCPU array index upon the sending of an SGI, which allows...CVE-2017-10923Fix available6.5 Medium
- xenThe grant-table feature in Xen through 4.8.x mishandles MMIO region grant references, which...CVE-2017-10922Fix available7.5 High
- xenThe grant-table feature in Xen through 4.8.x does not ensure sufficient type counts for a...CVE-2017-10921Fix available10.0 Critical
- xenThe grant-table feature in Xen through 4.8.x mishandles a GNTMAP_device_map and GNTMAP_host_map...CVE-2017-10920Fix available10.0 Critical
- xenXen through 4.8.x mishandles virtual interrupt injection, which allows guest OS users to cause a...CVE-2017-10919Fix available6.5 Medium
- xenXen through 4.8.x does not validate memory allocations during certain P2M operations, which...CVE-2017-10918Fix available10.0 Critical
- xenXen through 4.8.x does not validate the port numbers of polled event channel ports, which allows...CVE-2017-10917Fix available9.1 Critical
- xenThe vCPU context-switch implementation in Xen through 4.8.x improperly interacts with the Memory...CVE-2017-10916Fix available7.5 High
- xenThe shadow-paging feature in Xen through 4.8.x mismanages page references and consequently...CVE-2017-10915Fix available9.0 Critical
- xenThe grant-table feature in Xen through 4.8.x has a race condition leading to a double free, which...CVE-2017-10914Fix available8.1 High
- xenThe grant-table feature in Xen through 4.8.x provides false mapping information in certain cases...CVE-2017-10913Fix available9.8 Critical
- xenXen through 4.8.x mishandles page transfer, which allows guest OS users to obtain privileged host...CVE-2017-10912Fix available10.0 Critical
- xenXen through 4.6.x on 64-bit platforms mishandles a failsafe callback, which might allow PV guest...CVE-2017-8905Fix available8.8 High
- xenXen through 4.8.x mishandles the "contains segment descriptors" property during GNTTABOP_transfer...CVE-2017-8904Fix available8.8 High
- xenXen through 4.8.x on 64-bit platforms mishandles page tables after an IRET hypercall, which might...CVE-2017-8903Fix available8.8 High
- xen, novell suse linux enterprise point of sale, suse linux enterprise server +3 more +5 moreXen PV guest before Xen 4.3 checked access permissions to MMIO ranges only after accessing them,...CVE-2017-7995Fix available3.8 Low
- xenAn issue (known as XSA-212) was discovered in Xen, with fixes available for 4.8.x, 4.7.x, 4.6.x,...CVE-2017-7228Public exploitFix available8.2 High
- xenXen through 4.7.x allows local ARM guest OS users to cause a denial of service (host crash) via...CVE-2016-9818Fix available6.5 Medium
- xenXen through 4.7.x allows local ARM guest OS users to cause a denial of service (host crash) via...CVE-2016-9817Fix available6.5 Medium
- xenXen through 4.7.x allows local ARM guest OS users to cause a denial of service (host crash) via...CVE-2016-9816Fix available6.5 Medium
- xenXen through 4.7.x allows local ARM guest OS users to cause a denial of service (host panic) by...CVE-2016-9815Fix available6.5 Medium
- qemu, citrix xenserver, debian linux +8 more +10 moreQuick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is...CVE-2017-2620Fix available5.5 Medium
- qemu, citrix xenserver, debian linux +8 more +10 moreQuick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an...CVE-2017-2615Fix available5.5 Medium
- xenCMPXCHG8B emulation in Xen 3.3.x through 4.7.x on x86 systems allows local HVM guest OS users to...CVE-2016-9932Fix available3.3 Low
- xen, citrix xenserver +1 moreVMFUNC emulation in Xen 4.6.x through 4.8.x on x86 systems using AMD virtualization extensions ...CVE-2016-10025Fix available5.5 Medium
- xen, citrix xenserver +1 moreXen through 4.8.x allows local x86 PV guest OS kernel administrators to cause a denial of service...CVE-2016-10024Fix available6.0 Medium
- xenXen through 4.8.x allows local 64-bit x86 HVM guest OS users to gain privileges by leveraging...CVE-2016-10013Fix available7.8 High
- xenXen 4.7 allows local guest OS users to obtain sensitive host information by loading a 32-bit ELF...CVE-2016-9384Fix available6.5 Medium
- xenXen 4.5.x through 4.7.x on AMD systems without the NRip feature, when emulating instructions that...CVE-2016-9378Fix available5.5 Medium
- xenXen 4.5.x through 4.7.x on AMD systems without the NRip feature, when emulating instructions that...CVE-2016-9377Fix available5.5 Medium
- xen, citrix xenserver +1 moreThe x86 segment base write emulation functionality in Xen 4.4.x through 4.7.x allows local x86 PV...CVE-2016-9385Fix available6.0 Medium
- xen, citrix xenserver +1 moreThe x86 emulator in Xen does not properly treat x86 NULL segments as unusable when accessing...CVE-2016-9386Fix available7.8 High
- xen, citrix xenserver +1 moreXen, when running on a 64-bit hypervisor, allows local x86 guest OS users to modify arbitrary...CVE-2016-9383Fix available8.8 High
- xen, citrix xenserver +1 moreXen 4.0.x through 4.7.x mishandle x86 task switches to VM86 mode, which allows local 32-bit x86...CVE-2016-9382Fix available7.8 High
- xen, citrix xenserver +1 moreThe pygrub boot loader emulator in Xen, when nul-delimited output format is requested, allows...CVE-2016-9380Fix available7.5 High
- xen, citrix xenserver +1 moreThe pygrub boot loader emulator in Xen, when S-expression output format is requested, allows...CVE-2016-9379Fix available7.9 High
- xenXen 4.7.x and earlier does not properly honor CR0.TS and CR0.EM, which allows local x86 HVM guest...CVE-2016-7777Fix available6.3 Medium
- xenXen 4.5.3, 4.6.3, and 4.7.x allow local HVM guest OS administrators to overwrite hypervisor...CVE-2016-7093Fix available8.2 High
- xenUse-after-free vulnerability in the FIFO event channel code in Xen 4.4.x allows local guest OS...CVE-2016-7154Fix available6.7 Medium
- xenBuffer overflow in Xen 4.7.x and earlier allows local x86 HVM guest OS administrators on guests...CVE-2016-7094Fix available4.1 Medium
- xenThe get_page_from_l3e function in arch/x86/mm.c in Xen allows local 32-bit PV guest OS...CVE-2016-7092Fix available8.2 High
- xen, citrix xenserver +1 moreXen 4.5.x through 4.7.x do not implement Supervisor Mode Access Prevention (SMAP) whitelisting in...CVE-2016-6259Fix available6.2 Medium
- Show moreLoading…