Search Results (Refine Search)
- Results Type: Overview
- Keyword (text search): cpe:2.3:o:xen:xen:4.1.5:*:*:*:*:*:*:*
- CPE Name Search: true
Vuln ID | Summary | CVSS Severity |
---|---|---|
CVE-2013-1432 |
Xen 4.1.x and 4.2.x, when the XSA-45 patch is in place, does not properly maintain references on pages stored for deferred cleanup, which allows local PV guest kernels to cause a denial of service (premature page free and hypervisor crash) or possibly gain privileges via unspecified vectors. Published: August 28, 2013; 5:55:08 PM -0400 |
V3.x:(not available) V2.0: 7.4 HIGH |
CVE-2013-2196 |
Multiple unspecified vulnerabilities in the Elf parser (libelf) in Xen 4.2.x and earlier allow local guest administrators with certain permissions to have an unspecified impact via a crafted kernel, related to "other problems" that are not CVE-2013-2194 or CVE-2013-2195. Published: August 23, 2013; 12:55:07 PM -0400 |
V3.x:(not available) V2.0: 6.9 MEDIUM |
CVE-2013-2195 |
The Elf parser (libelf) in Xen 4.2.x and earlier allow local guest administrators with certain permissions to have an unspecified impact via a crafted kernel, related to "pointer dereferences" involving unexpected calculations. Published: August 23, 2013; 12:55:07 PM -0400 |
V3.x:(not available) V2.0: 6.9 MEDIUM |
CVE-2013-2194 |
Multiple integer overflows in the Elf parser (libelf) in Xen 4.2.x and earlier allow local guest administrators with certain permissions to have an unspecified impact via a crafted kernel. Published: August 23, 2013; 12:55:07 PM -0400 |
V3.x:(not available) V2.0: 6.9 MEDIUM |
CVE-2013-2078 |
Xen 4.0.2 through 4.0.4, 4.1.x, and 4.2.x allows local PV guest users to cause a denial of service (hypervisor crash) via certain bit combinations to the XSETBV instruction. Published: August 14, 2013; 11:55:06 AM -0400 |
V3.x:(not available) V2.0: 4.7 MEDIUM |
CVE-2013-1964 |
Xen 4.0.x and 4.1.x incorrectly releases a grant reference when releasing a non-v1, non-transitive grant, which allows local guest administrators to cause a denial of service (host crash), obtain sensitive information, or possibly have other impacts via unspecified vectors. Published: May 21, 2013; 2:55:01 PM -0400 |
V3.x:(not available) V2.0: 6.9 MEDIUM |
CVE-2013-1919 |
Xen 4.2.x and 4.1.x does not properly restrict access to IRQs, which allows local stub domain clients to gain access to IRQs and cause a denial of service via vectors related to "passed-through IRQs or PCI devices." Published: May 13, 2013; 7:55:01 PM -0400 |
V3.x:(not available) V2.0: 4.7 MEDIUM |
CVE-2013-1918 |
Certain page table manipulation operations in Xen 4.1.x, 4.2.x, and earlier are not preemptible, which allows local PV kernels to cause a denial of service via vectors related to "deep page table traversal." Published: May 13, 2013; 7:55:01 PM -0400 |
V3.x:(not available) V2.0: 4.7 MEDIUM |
CVE-2012-5515 |
The (1) XENMEM_decrease_reservation, (2) XENMEM_populate_physmap, and (3) XENMEM_exchange hypercalls in Xen 4.2 and earlier allow local guest administrators to cause a denial of service (long loop and hang) via a crafted extent_order value. Published: December 13, 2012; 6:53:49 AM -0500 |
V3.x:(not available) V2.0: 4.7 MEDIUM |
CVE-2012-5514 |
The guest_physmap_mark_populate_on_demand function in Xen 4.2 and earlier does not properly unlock the subject GFNs when checking if they are in use, which allows local guest HVM administrators to cause a denial of service (hang) via unspecified vectors. Published: December 13, 2012; 6:53:49 AM -0500 |
V3.x:(not available) V2.0: 4.7 MEDIUM |
CVE-2012-5513 |
The XENMEM_exchange handler in Xen 4.2 and earlier does not properly check the memory address, which allows local PV guest OS administrators to cause a denial of service (crash) or possibly gain privileges via unspecified vectors that overwrite memory in the hypervisor reserved range. Published: December 13, 2012; 6:53:48 AM -0500 |
V3.x:(not available) V2.0: 6.9 MEDIUM |
CVE-2012-4544 |
The PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk (1) before or (2) after decompression, which allows local guest administrators to cause a denial of service (domain 0 memory consumption) via a crafted (a) kernel or (b) ramdisk. Published: October 31, 2012; 12:55:05 PM -0400 |
V3.x:(not available) V2.0: 2.1 LOW |
CVE-2007-5730 |
Heap-based buffer overflow in QEMU 0.8.2, as used in Xen and possibly other products, allows local users to execute arbitrary code via crafted data in the "net socket listen" option, aka QEMU "net socket" heap overflow. NOTE: some sources have used CVE-2007-1321 to refer to this issue as part of "NE2000 network driver and the socket code," but this is the correct identifier for the individual net socket listen vulnerability. Published: October 30, 2007; 6:46:00 PM -0400 |
V3.x:(not available) V2.0: 7.2 HIGH |