Search Results (Refine Search)
- Results Type: Overview
- Keyword (text search): cpe:2.3:o:xen:xen:4.1.0:*:*:*:*:*:x86:*
- CPE Name Search: true
Vuln ID | Summary | CVSS Severity |
---|---|---|
CVE-2013-1918 |
Certain page table manipulation operations in Xen 4.1.x, 4.2.x, and earlier are not preemptible, which allows local PV kernels to cause a denial of service via vectors related to "deep page table traversal." Published: May 13, 2013; 7:55:01 PM -0400 |
V3.x:(not available) V2.0: 4.7 MEDIUM |
CVE-2013-1917 |
Xen 3.1 through 4.x, when running 64-bit hosts on Intel CPUs, does not clear the NT flag when using an IRET after a SYSENTER instruction, which allows PV guest users to cause a denial of service (hypervisor crash) by triggering a #GP fault, which is not properly handled by another IRET instruction. Published: May 13, 2013; 7:55:01 PM -0400 |
V3.x:(not available) V2.0: 1.9 LOW |
CVE-2013-1920 |
Xen 4.2.x, 4.1.x, and earlier, when the hypervisor is running "under memory pressure" and the Xen Security Module (XSM) is enabled, uses the wrong ordering of operations when extending the per-domain event channel tracking table, which causes a use-after-free and allows local guest kernels to inject arbitrary events and gain privileges via unspecified vectors. Published: April 12, 2013; 6:55:01 PM -0400 |
V3.x:(not available) V2.0: 4.4 MEDIUM |
CVE-2013-0215 |
oxenstored in Xen 4.1.x, Xen 4.2.x, and xen-unstable does not properly consider the state of the Xenstore ring during read operations, which allows guest OS users to cause a denial of service (daemon crash and host-control outage, or memory consumption) or obtain sensitive control-plane data by leveraging guest administrative access. Published: March 07, 2013; 12:04:44 AM -0500 |
V3.x:(not available) V2.0: 4.3 MEDIUM |
CVE-2013-0153 |
The AMD IOMMU support in Xen 4.2.x, 4.1.x, 3.3, and other versions, when using AMD-Vi for PCI passthrough, uses the same interrupt remapping table for the host and all guests, which allows guests to cause a denial of service by injecting an interrupt into other guests. Published: February 14, 2013; 5:55:02 PM -0500 |
V3.x:(not available) V2.0: 4.7 MEDIUM |
CVE-2012-5634 |
Xen 4.2.x, 4.1.x, and 4.0, when using Intel VT-d for PCI passthrough, does not properly configure VT-d when supporting a device that is behind a legacy PCI Bridge, which allows local guests to cause a denial of service to other guests by injecting an interrupt. Published: February 14, 2013; 5:55:01 PM -0500 |
V3.x:(not available) V2.0: 6.1 MEDIUM |
CVE-2012-6333 |
Multiple HVM control operations in Xen 3.4 through 4.2 allow local HVM guest OS administrators to cause a denial of service (physical CPU consumption) via a large input. Published: December 13, 2012; 6:53:49 AM -0500 |
V3.x:(not available) V2.0: 4.7 MEDIUM |
CVE-2012-5515 |
The (1) XENMEM_decrease_reservation, (2) XENMEM_populate_physmap, and (3) XENMEM_exchange hypercalls in Xen 4.2 and earlier allow local guest administrators to cause a denial of service (long loop and hang) via a crafted extent_order value. Published: December 13, 2012; 6:53:49 AM -0500 |
V3.x:(not available) V2.0: 4.7 MEDIUM |
CVE-2012-5514 |
The guest_physmap_mark_populate_on_demand function in Xen 4.2 and earlier does not properly unlock the subject GFNs when checking if they are in use, which allows local guest HVM administrators to cause a denial of service (hang) via unspecified vectors. Published: December 13, 2012; 6:53:49 AM -0500 |
V3.x:(not available) V2.0: 4.7 MEDIUM |
CVE-2012-5513 |
The XENMEM_exchange handler in Xen 4.2 and earlier does not properly check the memory address, which allows local PV guest OS administrators to cause a denial of service (crash) or possibly gain privileges via unspecified vectors that overwrite memory in the hypervisor reserved range. Published: December 13, 2012; 6:53:48 AM -0500 |
V3.x:(not available) V2.0: 6.9 MEDIUM |
CVE-2012-5511 |
Stack-based buffer overflow in the dirty video RAM tracking functionality in Xen 3.4 through 4.1 allows local HVM guest OS administrators to cause a denial of service (crash) via a large bitmap image. Published: December 13, 2012; 6:53:48 AM -0500 |
V3.x:(not available) V2.0: 4.7 MEDIUM |
CVE-2012-5510 |
Xen 4.x, when downgrading the grant table version, does not properly remove the status page from the tracking list when freeing the page, which allows local guest OS administrators to cause a denial of service (hypervisor crash) via unspecified vectors. Published: December 13, 2012; 6:53:48 AM -0500 |
V3.x:(not available) V2.0: 4.7 MEDIUM |
CVE-2011-3131 |
Xen 4.1.1 and earlier allows local guest OS kernels with control of a PCI[E] device to cause a denial of service (CPU consumption and host hang) via many crafted DMA requests that are denied by the IOMMU, which triggers a livelock. Published: December 13, 2012; 6:53:33 AM -0500 |
V3.x:(not available) V2.0: 4.6 MEDIUM |
CVE-2012-3432 |
The handle_mmio function in arch/x86/hvm/io.c in the MMIO operations emulator for Xen 3.3 and 4.x, when running an HVM guest, does not properly reset certain state information between emulation cycles, which allows local guest OS users to cause a denial of service (guest OS crash) via unspecified operations on MMIO regions. Published: December 03, 2012; 4:55:01 PM -0500 |
V3.x:(not available) V2.0: 1.9 LOW |
CVE-2012-0218 |
Xen 3.4, 4.0, and 4.1, when the guest OS has not registered a handler for a syscall or sysenter instruction, does not properly clear a flag for exception injection when injecting a General Protection Fault, which allows local PV guest OS users to cause a denial of service (guest crash) by later triggering an exception that would normally be handled within Xen. Published: December 03, 2012; 4:55:01 PM -0500 |
V3.x:(not available) V2.0: 1.9 LOW |
CVE-2012-4538 |
The HVMOP_pagetable_dying hypercall in Xen 4.0, 4.1, and 4.2 does not properly check the pagetable state when running on shadow pagetables, which allows a local HVM guest OS to cause a denial of service (hypervisor crash) via unspecified vectors. Published: November 24, 2012; 3:55:03 PM -0500 |
V3.x:(not available) V2.0: 4.9 MEDIUM |
CVE-2012-3433 |
Xen 4.0 and 4.1 allows local HVM guest OS kernels to cause a denial of service (domain 0 VCPU hang and kernel panic) by modifying the physical address space in a way that triggers excessive shared page search time during the p2m teardown. Published: November 24, 2012; 3:55:02 PM -0500 |
V3.x:(not available) V2.0: 4.9 MEDIUM |
CVE-2012-6036 |
The (1) memc_save_get_next_page, (2) tmemc_restore_put_page and (3) tmemc_restore_flush_page functions in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 do not check for negative id pools, which allows local guest OS users to cause a denial of service (memory corruption and host crash) or possibly execute arbitrary code via unspecified vectors. NOTE: this issue was originally published as part of CVE-2012-3497, which was too general; CVE-2012-3497 has been SPLIT into this ID and others. Published: November 23, 2012; 3:55:04 PM -0500 |
V3.x:(not available) V2.0: 4.4 MEDIUM |
CVE-2012-6035 |
The do_tmem_destroy_pool function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 does not properly validate pool ids, which allows local guest OS users to cause a denial of service (memory corruption and host crash) or execute arbitrary code via unspecified vectors. NOTE: this issue was originally published as part of CVE-2012-3497, which was too general; CVE-2012-3497 has been SPLIT into this ID and others. Published: November 23, 2012; 3:55:04 PM -0500 |
V3.x:(not available) V2.0: 6.9 MEDIUM |
CVE-2012-6034 |
The (1) tmemc_save_get_next_page and (2) tmemc_save_get_next_inv functions and the (3) TMEMC_SAVE_GET_POOL_UUID sub-operation in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 "do not check incoming guest output buffer pointers," which allows local guest OS users to cause a denial of service (memory corruption and host crash) or execute arbitrary code via unspecified vectors. NOTE: this issue was originally published as part of CVE-2012-3497, which was too general; CVE-2012-3497 has been SPLIT into this ID and others. Published: November 23, 2012; 3:55:04 PM -0500 |
V3.x:(not available) V2.0: 4.4 MEDIUM |