Xen

Xen

476 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.8

CVE-2019-17343

  • EPSS 0.12%
  • Veröffentlicht 08.10.2019 01:15:10
  • Zuletzt bearbeitet 21.11.2024 04:32:07

An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges by leveraging incorrect use of the HVM physmap concept for PV domains.

6.5

CVE-2019-17344

  • EPSS 0.15%
  • Veröffentlicht 08.10.2019 01:15:10
  • Zuletzt bearbeitet 21.11.2024 04:32:07

An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service by leveraging a long-running operation that exists to support restartability of PTE updates.

6.5

CVE-2019-17345

  • EPSS 0.08%
  • Veröffentlicht 08.10.2019 01:15:10
  • Zuletzt bearbeitet 21.11.2024 04:32:07

An issue was discovered in Xen 4.8.x through 4.11.x allowing x86 PV guest OS users to cause a denial of service because mishandling of failed IOMMU operations causes a bug check during the cleanup of a crashed guest.

8.8

CVE-2019-17346

  • EPSS 0.18%
  • Veröffentlicht 08.10.2019 01:15:10
  • Zuletzt bearbeitet 21.11.2024 04:32:08

An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges because of an incompatibility between Process Context Identifiers (PCID) and TLB flushes.

7.8

CVE-2019-17347

  • EPSS 0.14%
  • Veröffentlicht 08.10.2019 01:15:10
  • Zuletzt bearbeitet 21.11.2024 04:32:08

An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges because a guest can manipulate its virtualised %cr4 in a way that is incompatible with Linux (and possibly other guest kernel...

6.5

CVE-2019-17348

  • EPSS 0.21%
  • Veröffentlicht 08.10.2019 01:15:10
  • Zuletzt bearbeitet 21.11.2024 04:32:08

An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service because of an incompatibility between Process Context Identifiers (PCID) and shadow-pagetable switching.

5.5

CVE-2019-17350

  • EPSS 0.14%
  • Veröffentlicht 08.10.2019 00:15:10
  • Zuletzt bearbeitet 21.11.2024 04:32:08

An issue was discovered in Xen through 4.12.x allowing Arm domU attackers to cause a denial of service (infinite loop) involving a compare-and-exchange operation.

6.5

CVE-2019-17351

  • EPSS 0.09%
  • Veröffentlicht 08.10.2019 00:15:10
  • Zuletzt bearbeitet 21.11.2024 04:32:08

An issue was discovered in drivers/xen/balloon.c in the Linux kernel before 5.2.3, as used in Xen through 4.12.x, allowing guest OS users to cause a denial of service because of unrestricted resource consumption during the mapping of guest memory, ak...

7.8

CVE-2018-19961

  • EPSS 0.19%
  • Veröffentlicht 08.12.2018 04:29:00
  • Zuletzt bearbeitet 21.11.2024 03:58:53

An issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS users to gain host OS privileges because TLB flushes do not always occur after IOMMU mapping changes.

7.8

CVE-2018-19962

  • EPSS 0.19%
  • Veröffentlicht 08.12.2018 04:29:00
  • Zuletzt bearbeitet 21.11.2024 03:58:53

An issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS users to gain host OS privileges because small IOMMU mappings are unsafely combined into larger ones.