Skip to contentXen vulnerabilities
Newest
- xenGuests can cause Xenstore crash via soft reset When a guest issues a "Soft Reset" (e.g. for...CVE-2022-42330Fix available7.5 High
- amd a10-9600p firmware, a10-9630p firmware, a12-9700p firmware +167 more +169 moreIBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets...CVE-2022-23824Fix available5.5 Medium
- fedoraproject fedora, xen +1 morex86: unintended memory sharing between guests On Intel systems that support the "virtualize APIC...CVE-2022-42327Fix available7.1 High
- xen, debian linux, fedoraproject fedora +2 moreXenstore: Guests can create arbitrary number of nodes via transactions T[his CNA information...CVE-2022-42326Fix available5.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreXenstore: Guests can create arbitrary number of nodes via transactions T[his CNA information...CVE-2022-42325Fix available5.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreOxenstored 32->31 bit integer truncation issues Integers in Ocaml are 63 or 31 bits of signed...CVE-2022-42324Fix available5.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreXenstore: Cooperating guests can create arbitrary numbers of nodes T[his CNA information record...CVE-2022-42323Fix available5.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreXenstore: Cooperating guests can create arbitrary numbers of nodes T[his CNA information record...CVE-2022-42322Fix available5.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreXenstore: Guests can crash xenstored via exhausting the stack Xenstored is using recursion for...CVE-2022-42321Fix available6.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreXenstore: Guests can get access to Xenstore nodes of deleted domains Access rights of Xenstore...CVE-2022-42320Fix available7.0 High
- xen, debian linux, fedoraproject fedora +2 moreXenstore: Guests can cause Xenstore to not free temporary memory When working on a request of a...CVE-2022-42319Fix available6.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreXenstore: guests can let run xenstored out of memory T[his CNA information record relates to...CVE-2022-42318Fix available6.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreXenstore: guests can let run xenstored out of memory T[his CNA information record relates to...CVE-2022-42317Fix available6.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreXenstore: guests can let run xenstored out of memory T[his CNA information record relates to...CVE-2022-42316Fix available6.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreXenstore: guests can let run xenstored out of memory T[his CNA information record relates to...CVE-2022-42315Fix available6.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreXenstore: guests can let run xenstored out of memory T[his CNA information record relates to...CVE-2022-42314Fix available6.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreXenstore: guests can let run xenstored out of memory T[his CNA information record relates to...CVE-2022-42313Fix available6.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreXenstore: guests can let run xenstored out of memory T[his CNA information record relates to...CVE-2022-42312Fix available6.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreXenstore: guests can let run xenstored out of memory T[his CNA information record relates to...CVE-2022-42311Fix available6.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreXenstore: Guests can create orphaned Xenstore nodes By creating multiple nodes inside a...CVE-2022-42310Fix available5.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreXenstore: Guests can crash xenstored Due to a bug in the fix of XSA-115 a malicious guest can...CVE-2022-42309Fix available8.8 High
- xapiXAPI open file limit DoS It is possible for an unauthenticated client on the network to cause...CVE-2022-33749Fix available5.3 Medium
- debian linux, fedoraproject fedora, xen +2 morelock order inversion in transitive grant copy handling As part of XSA-226 a missing cleanup call...CVE-2022-33748Fix available5.6 Medium
- debian linux, fedoraproject fedora, xen +2 moreArm: unbounded memory consumption for 2nd-level page tables Certain actions require e.g. removing...CVE-2022-33747Fix available3.8 Low
- debian linux, fedoraproject fedora, xen +2 moreP2M pool freeing may take excessively long The P2M pool backing second level address translation...CVE-2022-33746Fix available6.5 Medium
- xen, debian linux, fedoraproject fedora +2 moreinsufficient TLB flush for x86 PV guests in shadow mode For migration as well as to work around...CVE-2022-33745Fix available8.8 High
- amd a10-9600p firmware, a10-9630p firmware, a12-9700p firmware +124 more +126 moreAMD microprocessor families 15h to 18h are affected by a new Spectre variant that is able to...CVE-2022-29900Public exploitFix available6.5 Medium
- debian linux, fedoraproject fedora, intel core i3-6100 firmware +127 more +129 moreArbitrary Memory Disclosure through CPU Side-Channel Attacks (Retbleed)CVE-2022-29901Fix available5.6 Medium
- debian linux, fedoraproject fedora, linux kernel +1 more +3 moreLinux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the...CVE-2022-33742Fix available7.1 High
- debian linux, fedoraproject fedora, linux kernel +1 more +3 moreLinux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the...CVE-2022-33741Fix available7.1 High
- debian linux, fedoraproject fedora, linux kernel +1 more +3 moreLinux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the...CVE-2022-33740Fix available7.1 High
- debian linux, fedoraproject fedora, linux kernel +1 more +3 moreLinux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the...CVE-2022-26365Fix available7.1 High
- debian linux, linux kernel, xen +2 morenetwork backend may cause Linux netfront to use freed SKBs While adding logic to support XDP ...CVE-2022-33743Fix available7.8 High
- debian linux, fedoraproject fedora, intel sgx dcap +5 more +7 moreModerate: kernel-rt security and bug fix updateCVE-2022-21166Fix available5.5 Medium
- debian linux, intel sgx dcap, sgx psw +2 more +4 moreIncomplete cleanup in specific special register read operations for some Intel(R) Processors may...CVE-2022-21127Fix available5.5 Medium
- debian linux, fedoraproject fedora, intel sgx dcap +5 more +7 moreIncomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an...CVE-2022-21125Fix available5.5 Medium
- debian linux, fedoraproject fedora, intel sgx dcap +5 more +7 moreIncomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an...CVE-2022-21123Fix available5.5 Medium
- xen, debian linux, fedoraproject fedora +2 morex86 pv: Race condition in typeref acquisition Xen maintains a type reference count for pages, in...CVE-2022-26362Fix available6.4 Medium
- xen, debian linux, fedoraproject fedora +2 morex86 pv: Insufficient care with non-coherent mappings T[his CNA information record relates to...CVE-2022-26364Fix available6.7 Medium
- xen, debian linux, fedoraproject fedora +2 morex86 pv: Insufficient care with non-coherent mappings T[his CNA information record relates to...CVE-2022-26363Fix available6.7 Medium
- debian linux, fedoraproject fedora, xen +2 moreIOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[his CNA information record relates to...CVE-2022-26361Fix available7.8 High
- debian linux, fedoraproject fedora, xen +2 moreIOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[his CNA information record relates to...CVE-2022-26360Fix available7.8 High
- debian linux, fedoraproject fedora, xen +2 moreIOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[his CNA information record relates to...CVE-2022-26359Fix available7.8 High
- debian linux, fedoraproject fedora, xen +2 moreIOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[his CNA information record relates to...CVE-2022-26358Fix available7.8 High
- xen, debian linux, fedoraproject fedora +2 morerace in VT-d domain ID cleanup Xen domain IDs are up to 15 bits wide. VT-d hardware may allow for...CVE-2022-26357Fix available7.0 High
- xen, debian linux, fedoraproject fedora +2 moreRacy interactions between dirty vram tracking and paging log dirty hypercalls Activation of log...CVE-2022-26356Fix available5.6 Medium
- debian linux, xen, unspecified +2 moreLinux PV device frontends vulnerable to attacks by backends T[his CNA information record relates...CVE-2022-23042Fix available7.0 High
- debian linux, xen, unspecified +2 moreLinux PV device frontends vulnerable to attacks by backends T[his CNA information record relates...CVE-2022-23041Fix available7.0 High
- debian linux, xen, unspecified +2 moreLinux PV device frontends vulnerable to attacks by backends T[his CNA information record relates...CVE-2022-23040Fix available7.0 High
- debian linux, xen, unspecified +2 moreLinux PV device frontends vulnerable to attacks by backends T[his CNA information record relates...CVE-2022-23039Fix available7.0 High
- Show moreLoading…