Xen

Xen

476 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.8

CVE-2016-2270

  • EPSS 0.3%
  • Published 19.02.2016 16:59:00
  • Last modified 12.04.2025 10:46:40

Xen 4.6.x and earlier allows local guest administrators to cause a denial of service (host reboot) via vectors related to multiple mappings of MMIO pages with different cachability settings.

6.3

CVE-2016-1571

  • EPSS 0.3%
  • Published 22.01.2016 15:59:06
  • Last modified 12.04.2025 10:46:40

The paging_invlpg function in include/asm-x86/paging.h in Xen 3.3.x through 4.6.x, when using shadow mode paging or nested virtualization is enabled, allows local HVM guest users to cause a denial of service (host crash) via a non-canonical guest add...

8.5

CVE-2016-1570

  • EPSS 0.2%
  • Published 22.01.2016 15:59:05
  • Last modified 12.04.2025 10:46:40

The PV superpage functionality in arch/x86/mm.c in Xen 3.4.0, 3.4.1, and 4.1.x through 4.6.x allows local PV guests to obtain sensitive information, cause a denial of service, gain privileges, or have unspecified other impact via a crafted page ident...

5

CVE-2015-8615

  • EPSS 0.24%
  • Published 08.01.2016 19:59:17
  • Last modified 12.04.2025 10:46:40

The hvm_set_callback_via function in arch/x86/hvm/irq.c in Xen 4.6 does not limit the number of printk console messages when logging the new callback method, which allows local HVM guest OS users to cause a denial of service via a large number of cha...

7.8

CVE-2015-8341

  • EPSS 0.73%
  • Published 17.12.2015 19:59:09
  • Last modified 12.04.2025 10:46:40

The libxl toolstack library in Xen 4.1.x through 4.6.x does not properly release mappings of files used as kernels and initial ramdisks when managing multiple domains in the same process, which allows attackers to cause a denial of service (memory an...

4.7

CVE-2015-8340

  • EPSS 0.07%
  • Published 17.12.2015 19:59:08
  • Last modified 12.04.2025 10:46:40

The memory_exchange function in common/memory.c in Xen 3.2.x through 4.6.x does not properly release locks, which might allow guest OS administrators to cause a denial of service (deadlock or host crash) via unspecified vectors, related to XENMEM_exc...

4.7

CVE-2015-8339

  • EPSS 0.1%
  • Published 17.12.2015 19:59:07
  • Last modified 12.04.2025 10:46:40

The memory_exchange function in common/memory.c in Xen 3.2.x through 4.6.x does not properly hand back pages to a domain, which might allow guest OS administrators to cause a denial of service (host crash) via unspecified vectors related to domain te...

7.2

CVE-2015-8338

  • EPSS 0.2%
  • Published 17.12.2015 19:59:06
  • Last modified 12.04.2025 10:46:40

Xen 4.6.x and earlier does not properly enforce limits on page order inputs for the (1) XENMEM_increase_reservation, (2) XENMEM_populate_physmap, (3) XENMEM_exchange, and possibly other HYPERVISOR_memory_op suboperations, which allows ARM guest OS ad...

4.9

CVE-2015-7812

  • EPSS 0.08%
  • Published 17.11.2015 15:59:14
  • Last modified 12.04.2025 10:46:40

The hypercall_create_continuation function in arch/arm/domain.c in Xen 4.4.x through 4.6.x allows local guest users to cause a denial of service (host crash) via a preemptible hypercall to the multicall interface.

4.7

CVE-2015-8104

  • EPSS 0.35%
  • Published 16.11.2015 11:59:12
  • Last modified 23.04.2025 16:15:20

The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic or hang) by triggering many #DB (aka Debug) exceptions, related to svm.c.