Browse CVEs

HIGH 7.8 CVE-2023-34326 The caching invalidation guidelines from the AMD-Vi specification (48882—Rev 3.07-PUB—Oct 2022) is incorrect on some hardware, as devices will malfun… Xen Mitigation only Fix from $1,9502024-01-05 HIGH 7.5 CVE-2022-42330 Guests can cause Xenstore crash via soft reset When a guest issues a "Soft Reset" (e.g. for performing a kexec) the libxl based Xen toolstack will no… Xen Mitigation only Fix from $1,9502023-01-26 HIGH 7.1 CVE-2021-28692 inappropriate x86 IOMMU timeout detection / handling IOMMUs process commands issued to them in parallel with the operation of the CPU(s) issuing such… Xen Mitigation only Fix from $1,9502021-06-30 MEDIUM 6.5 CVE-2018-5244 In Xen 4.10, new infrastructure was introduced as part of an overhaul to how MSR emulation happens for guests. Unfortunately, one tracking structure … Xen Mitigation only Fix from $1,6002018-01-05 MEDIUM 6.5 CVE-2017-12855 Xen maintains the _GTF_{read,writ}ing bits as appropriate, to inform the guest that a grant is in use. A guest is expected not to modify the grant de… Xen Mitigation only Fix from $1,6002017-08-15 HIGH 7.5 CVE-2017-10916 The vCPU context-switch implementation in Xen through 4.8.x improperly interacts with the Memory Protection Extensions (MPX) and Protection Key (PKU)… Xen Mitigation only Fix from $1,9502017-07-05 MEDIUM 6.5 CVE-2017-10923 Xen through 4.8.x does not validate a vCPU array index upon the sending of an SGI, which allows guest OS users to cause a denial of service (hypervis… Xen Mitigation only Fix from $1,6002017-07-05 MEDIUM 5.6 CVE-2016-5242 The p2m_teardown function in arch/arm/p2m.c in Xen 4.4.x through 4.6.x allows local guest OS users with access to the driver domain to cause a denial… Xen Mitigation only Fix from $1,6002016-06-07 HIGH 8.2 CVE-2015-8550 Xen, when used on a system providing PV backends, allows local guest OS administrators to cause a denial of service (host OS crash) or gain privilege… Xen Mitigation only Fix from $1,9502016-04-14 HIGH 8.5 CVE-2016-1570 The PV superpage functionality in arch/x86/mm.c in Xen 3.4.0, 3.4.1, and 4.1.x through 4.6.x allows local PV guests to obtain sensitive information, … Xen Mitigation only Fix from $1,9502016-01-22 MEDIUM 5.0 CVE-2015-8615 The hvm_set_callback_via function in arch/x86/hvm/irq.c in Xen 4.6 does not limit the number of printk console messages when logging the new callback… Xen Mitigation only Fix from $1,6002016-01-08 HIGH 7.8 CVE-2015-8341 The libxl toolstack library in Xen 4.1.x through 4.6.x does not properly release mappings of files used as kernels and initial ramdisks when managing… Xen Mitigation only Fix from $1,9502015-12-17 HIGH 7.2 CVE-2015-7835 The mod_l2_entry function in arch/x86/mm.c in Xen 3.4 through 4.6.x does not properly validate level 2 page table entries, which allows local PV gues… Xen Mitigation only Fix from $1,9502015-10-30 HIGH 7.8 CVE-2015-4104 Xen 3.3.x through 4.5.x does not properly restrict access to PCI MSI mask bits, which allows local x86 HVM guest users to cause a denial of service (… Xen Mitigation only Fix from $1,9502015-06-03 MEDIUM 5.5 CVE-2014-2915 Xen 4.4.x, when running on ARM systems, does not properly restrict access to hardware features, which allows local guest users to cause a denial of s… Xen Mitigation only Fix from $1,6002014-04-24 HIGH 7.7 CVE-2011-1763 The get_free_port function in Xen allows local authenticated DomU users to cause a denial of service or possibly gain privileges via unspecified vect… Xen Mitigation only Fix from $1,9502014-01-07 MEDIUM 6.1 CVE-2011-1780 The instruction emulation in Xen 3.0.3 allows local SMP guest users to cause a denial of service (host crash) by replacing the instruction that cause… Xen Mitigation only Fix from $1,6002014-01-07 MEDIUM 5.2 CVE-2013-4553 The XEN_DOMCTL_getmemlist hypercall in Xen 3.4.x through 4.3.x (possibly 4.3.1) does not always obtain the page_alloc_lock and mm_rwlock in the same … Xen Mitigation only Fix from $1,6002013-12-24 MEDIUM 5.2 CVE-2013-4554 Xen 3.0.3 through 4.1.x (possibly 4.1.6.1), 4.2.x (possibly 4.2.3), and 4.3.x (possibly 4.3.1) does not properly prevent access to hypercalls, which … Xen Mitigation only Fix from $1,6002013-12-24 MEDIUM 6.8 CVE-2013-6400 Xen 4.2.x and 4.3.x, when using Intel VT-d and a PCI device has been assigned, does not clear the flag that suppresses IOMMU TLB flushes when unspeci… Xen Mitigation only Fix from $1,6002013-12-13 HIGH 7.9 CVE-2013-6375 Xen 4.2.x and 4.3.x, when using Intel VT-d for PCI passthrough, does not properly flush the TLB after clearing a present translation table entry, whi… Xen Mitigation only Fix from $1,9502013-11-23 MEDIUM 5.7 CVE-2013-4551 Xen 4.2.x and 4.3.x, when nested virtualization is disabled, does not properly check the emulation paths for (1) VMLAUNCH and (2) VMRESUME, which all… Xen Mitigation only Fix from $1,6002013-11-18 MEDIUM 5.2 CVE-2013-4416 The Ocaml xenstored implementation (oxenstored) in Xen 4.1.x, 4.2.x, and 4.3.x allows local guest domains to cause a denial of service (domain shutdo… Xen Mitigation only Fix from $1,6002013-11-02 MEDIUM 5.4 CVE-2013-4356 Xen 4.3.x writes hypervisor mappings to certain shadow pagetables when live migration is performed on hosts with more than 5TB of RAM, which allows l… Xen Mitigation only Fix from $1,6002013-10-09 HIGH 7.4 CVE-2013-2211 The libxenlight (libxl) toolstack library in Xen 4.0.x, 4.1.x, and 4.2.x uses weak permissions for xenstore keys for paravirtualised and emulated ser… Xen Mitigation only Fix from $1,9502013-08-28 MEDIUM 5.7 CVE-2013-2212 The vmx_set_uc_mode function in Xen 3.3 through 4.3, when disabling caches, allows local HVM guests with access to memory mapped I/O regions to cause… Xen Mitigation only Fix from $1,6002013-08-28 MEDIUM 5.2 CVE-2013-2077 Xen 4.0.x, 4.1.x, and 4.2.x does not properly restrict the contents of a XRSTOR, which allows local PV guest users to cause a denial of service (unha… Xen Mitigation only Fix from $1,6002013-08-28 MEDIUM 6.9 CVE-2013-1964 Xen 4.0.x and 4.1.x incorrectly releases a grant reference when releasing a non-v1, non-transitive grant, which allows local guest administrators to … Xen Mitigation only Fix from $1,6002013-05-21 MEDIUM 6.1 CVE-2012-5634 Xen 4.2.x, 4.1.x, and 4.0, when using Intel VT-d for PCI passthrough, does not properly configure VT-d when supporting a device that is behind a lega… Xen Mitigation only Fix from $1,6002013-02-14 HIGH 7.2 CVE-2012-6030 The do_tmem_op function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 allow local guest OS users to cause a denial of service (host cras… Xen Mitigation only Fix from $1,9502012-11-23