Skip to contentXen vulnerabilities
Newest
- debian linux, xen, unspecified +2 moreLinux PV device frontends vulnerable to attacks by backends T[his CNA information record relates...CVE-2022-23038Fix available7.0 High
- debian linux, xen, unspecified +2 moreLinux PV device frontends vulnerable to attacks by backends T[his CNA information record relates...CVE-2022-23037Fix available7.0 High
- debian linux, xen, unspecified +2 moreLinux PV device frontends vulnerable to attacks by backends T[his CNA information record relates...CVE-2022-23036Fix available7.0 High
- arm cortex-a57 firmware, cortex-a65 firmware, cortex-a65ae firmware +19 more +21 moreCertain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache...CVE-2022-23960Fix available5.6 Medium
- debian linux, fedoraproject fedora, xen +2 moreInsufficient cleanup of passed-through device IRQs The management of IRQs associated with...CVE-2022-23035Fix available4.6 Medium
- xen, debian linux, fedoraproject fedora +2 moreA PV guest could DoS Xen while unmapping a grant To address XSA-380, reference counting was...CVE-2022-23034Fix available5.5 Medium
- xen, debian linux, fedoraproject fedora +2 morearm: guest_physmap_remove_page not removing the p2m mappings The functions to remove one or more...CVE-2022-23033Fix available7.8 High
- xen, debian linux +1 moreRogue backends can cause DoS of guests via high frequency events T[his CNA information record...CVE-2021-28713Fix available6.5 Medium
- xen, debian linux +1 moreRogue backends can cause DoS of guests via high frequency events T[his CNA information record...CVE-2021-28712Fix available6.5 Medium
- xen, debian linux +1 moreRogue backends can cause DoS of guests via high frequency events T[his CNA information record...CVE-2021-28711Fix available6.5 Medium
- xengrant table v2 status pages may remain accessible after de-allocation (take two) Guest get...CVE-2021-28703Fix available7.0 High
- debian linux, fedoraproject fedora, xen +2 moreissues with partially successful P2M updates on x86 T[his CNA information record relates to...CVE-2021-28709Fix available7.8 High
- xen, debian linux, fedoraproject fedora +2 morePoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text...CVE-2021-28708Fix available8.8 High
- xen, debian linux, fedoraproject fedora +2 morePoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text...CVE-2021-28707Fix available8.8 High
- debian linux, fedoraproject fedora, xen +2 moreguests may exceed their designated memory limit When a guest is permitted to have close to 16TiB...CVE-2021-28706Fix available8.6 High
- debian linux, fedoraproject fedora, xen +2 moreissues with partially successful P2M updates on x86 T[his CNA information record relates to...CVE-2021-28705Fix available7.8 High
- xen, debian linux, fedoraproject fedora +2 morePoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text...CVE-2021-28704Fix available8.8 High
- xen, fedoraproject fedora +1 morecertain VT-d IOMMUs may not work in shared page table mode For efficiency reasons, address...CVE-2021-28710Fix available8.8 High
- debian linux, fedoraproject fedora, xen +2 morePCI devices with RMRRs not deassigned correctly Certain PCI devices in a system might be assigned...CVE-2021-28702Fix available7.6 High
- xen, debian linux, fedoraproject fedora +2 moreAnother race in XENMAPSPACE_grant_table handling Guests are permitted access to certain Xen-owned...CVE-2021-28701Fix available7.8 High
- xen, debian linux, fedoraproject fedora +2 moreIOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text...CVE-2021-28696Fix available6.8 Medium
- xen, debian linux, fedoraproject fedora +2 moreIOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text...CVE-2021-28695Fix available6.8 Medium
- xen, debian linux, fedoraproject fedora +2 moreIOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text...CVE-2021-28694Fix available6.8 Medium
- xen, debian linux, fedoraproject fedora +2 moregrant table v2 status pages may remain accessible after de-allocation Guest get permitted access...CVE-2021-28697Fix available7.8 High
- xen, debian linux, fedoraproject fedora +2 morelong running loops in grant table handling In order to properly monitor resource use, Xen...CVE-2021-28698Fix available5.5 Medium
- debian linux, fedoraproject fedora, xen +2 moreinadequate grant-v2 status frames array bounds check The v2 grant table interface separates grant...CVE-2021-28699Fix available5.5 Medium
- xen, debian linux, fedoraproject fedora +2 morexen/arm: No memory limit for dom0less domUs The dom0less feature allows an administrator to...CVE-2021-28700Fix available4.9 Medium
- xenxen/arm: Boot modules are not scrubbed The bootloader will load boot modules (e.g. kernel,...CVE-2021-28693Fix available5.5 Medium
- xeninappropriate x86 IOMMU timeout detection / handling IOMMUs process commands issued to them in...CVE-2021-28692Fix available7.1 High
- xenx86: TSX Async Abort protections not restored after S3 This issue relates to the TSX Async Abort...CVE-2021-28690Fix available6.5 Medium
- amd all supported processors, arm cortex-a72, broadcom bcm2711 +6 more +8 moreAMD Speculative execution with Floating-Point Value InjectionCVE-2021-263145.5 Medium
- amd all supported processors, arm cortex-a72, broadcom bcm2711 +6 more +8 moreAMD Speculative Code Store BypassCVE-2021-26313Fix available5.5 Medium
- xenx86: Speculative vulnerabilities with bare (non-shim) 32-bit PV guests 32-bit x86 PV guest...CVE-2021-28689Fix available5.5 Medium
- xenHVM soft-reset crashes toolstack libxl requires all data structures passed across its public...CVE-2021-28687Fix available5.5 Medium
- linux kernel, xen, netapp cloud backup +1 more +3 moreAn issue was discovered in the Linux kernel 5.9.x through 5.11.3, as used with Xen. In some less...CVE-2021-28039Fix available6.5 Medium
- xen, debian linux +1 moreAn issue was discovered in Xen through 4.11.x, allowing x86 Intel HVM guest OS users to achieve...CVE-2021-27379Fix available7.8 High
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen 4.9 through 4.14.x. On Arm, a guest is allowed to control whether...CVE-2021-26933Fix available5.5 Medium
- xen, fedoraproject fedora +1 moreAn issue was discovered in Xen 4.12.3 through 4.12.4 and 4.13.1 through 4.14.x. An x86 HVM guest...CVE-2021-3308Fix available5.5 Medium
- xen xapiAn issue was discovered in Xen XAPI before 2020-12-15. Certain xenstore keys provide feedback...CVE-2020-294877.5 High
- debian linux, linux kernel, xen +3 more +5 moreAn issue was discovered in the Linux kernel through 5.10.1, as used with Xen through 4.14.x. The...CVE-2020-29569Fix available8.8 High
- debian linux, xen +1 moreAn issue was discovered in Xen through 4.14.x. Some OSes (such as Linux, FreeBSD, and NetBSD) are...CVE-2020-29568Fix available6.5 Medium
- xen, fedoraproject fedora +1 moreAn issue was discovered in Xen 4.14.x. When moving IRQs between CPUs to distribute the load of...CVE-2020-29567Fix available6.2 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.14.x. A bounds check common to most operation time...CVE-2020-29571Fix available6.2 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.14.x. Recording of the per-vCPU control block mapping...CVE-2020-29570Fix available6.2 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.14.x. When they require assistance from the device model...CVE-2020-29566Fix available5.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.14.x. Nodes in xenstore have an ownership. In oxenstored...CVE-2020-29486Fix available6.0 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen 4.6 through 4.14.x. When acting upon a guest XS_RESET_WATCHES...CVE-2020-29485Fix available5.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.14.x. When a Xenstore watch fires, the xenstore client...CVE-2020-29484Fix available6.0 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.14.x. Xenstored and guests communicate via a shared...CVE-2020-29483Fix available6.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.14.x. A guest may access xenstore paths via absolute...CVE-2020-29482Fix available6.0 Medium
- Show moreLoading…