XE
Product
Xen
490
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 16High 134Medium 162Low 11
Watch
Add Xen to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2012-6333 | – | Dec 13 | Multiple HVM control operations in Xen 3.4 through 4.2 allow local HVM guest OS administrators to cause a denial of service (physical CPU consumption) via a large input Affected: 3.4.0; 3.4.1; 3.4.2; 3.4.3; 3.4.4; 4.0.0; +6 more |
| CVE-2012-5525 | – | Dec 13 | The get_page_from_gfn hypercall function in Xen 4.2 allows local PV guest OS administrators to cause a denial of service (crash) via a crafted GFN that triggers a buffer over-read Affected: 4.2.0 |
| CVE-2012-5515 | – | Dec 13 | The (1) XENMEM_decrease_reservation, (2) XENMEM_populate_physmap, and (3) XENMEM_exchange hypercalls in Xen 4.2 and earlier allow local guest administrators to cause a denial of… Affected: through 4.2.0; 3.0.2; 3.0.3; 3.0.4; 3.1.3; 3.1.4; +21 more |
| CVE-2012-5514 | – | Dec 13 | The guest_physmap_mark_populate_on_demand function in Xen 4.2 and earlier does not properly unlock the subject GFNs when checking if they are in use, which allows local guest HVM… Affected: through 4.2.0; 3.0.2; 3.0.3; 3.0.4; 3.1.3; 3.1.4; +21 more |
| CVE-2012-5513 | – | Dec 13 | The XENMEM_exchange handler in Xen 4.2 and earlier does not properly check the memory address, which allows local PV guest OS administrators to cause a denial of service (crash)… Affected: through 4.2.0; 3.0.2; 3.0.3; 3.0.4; 3.1.3; 3.1.4; +21 more |
| CVE-2012-5511 | – | Dec 13 | Stack-based buffer overflow in the dirty video RAM tracking functionality in Xen 3.4 through 4.1 allows local HVM guest OS administrators to cause a denial of service (crash) via… Affected: 3.4.0; 3.4.1; 3.4.2; 3.4.3; 3.4.4; 4.0.0; +5 more |
| CVE-2012-5510 | – | Dec 13 | Xen 4.x, when downgrading the grant table version, does not properly remove the status page from the tracking list when freeing the page, which allows local guest OS… Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.1.0; +4 more |
| CVE-2011-3131 | – | Dec 13 | Xen 4.1.1 and earlier allows local guest OS kernels with control of a PCI[E] device to cause a denial of service (CPU consumption and host hang) via many crafted DMA requests that… Affected: through 4.1.1 |
| CVE-2012-3432 | – | Dec 3 | The handle_mmio function in arch/x86/hvm/io.c in the MMIO operations emulator for Xen 3.3 and 4.x, when running an HVM guest, does not properly reset certain state information… Affected: 3.3.0; 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; +5 more |
| CVE-2012-2934 | – | Dec 3 | Xen 4.0, and 4.1, when running a 64-bit PV guest on "older" AMD CPUs, does not properly protect against a certain AMD processor bug, which allows local guest OS users to cause a… Affected: 4.0.0; 4.1.0 |
| CVE-2012-0218 | – | Dec 3 | Xen 3.4, 4.0, and 4.1, when the guest OS has not registered a handler for a syscall or sysenter instruction, does not properly clear a flag for exception injection when injecting… Affected: 3.4.0; 4.0.0; 4.1.0 |
| CVE-2012-4538 | – | Nov 24 | The HVMOP_pagetable_dying hypercall in Xen 4.0, 4.1, and 4.2 does not properly check the pagetable state when running on shadow pagetables, which allows a local HVM guest OS to… Affected: 4.0.0; 4.1.0; 4.2.0 |
| CVE-2012-3433 | – | Nov 24 | Xen 4.0 and 4.1 allows local HVM guest OS kernels to cause a denial of service (domain 0 VCPU hang and kernel panic) by modifying the physical address space in a way that triggers… Affected: 4.0.0; 4.1.0 |
| CVE-2012-6036 | – | Nov 23 | The (1) memc_save_get_next_page, (2) tmemc_restore_put_page and (3) tmemc_restore_flush_page functions in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 do not check for… Affected: 4.0.0; 4.1.0; 4.2.0 |
| CVE-2012-6035 | – | Nov 23 | The do_tmem_destroy_pool function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 does not properly validate pool ids, which allows local guest OS users to cause a… Affected: 4.0.0; 4.1.0; 4.2.0 |
| CVE-2012-6034 | – | Nov 23 | The (1) tmemc_save_get_next_page and (2) tmemc_save_get_next_inv functions and the (3) TMEMC_SAVE_GET_POOL_UUID sub-operation in the Transcendent Memory (TMEM) in Xen 4.0, 4.1,… Affected: 4.0.0; 4.1.0; 4.2.0 |
| CVE-2012-6033 | – | Nov 23 | The do_tmem_control function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 does not properly check privileges, which allows local guest OS users to access control… Affected: 4.0.0; 4.1.0; 4.2.0 |
| CVE-2012-6032 | – | Nov 23 | Multiple integer overflows in the (1) tmh_copy_from_client and (2) tmh_copy_to_client functions in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 allow local guest OS… Affected: 4.0.0; 4.1.0; 4.2.0 |
| CVE-2012-6031 | – | Nov 23 | The do_tmem_get function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 allow local guest OS users to cause a denial of service (CPU hang and host crash) via… Affected: 4.0.0; 4.1.0; 4.2.0 |
| CVE-2012-6030 | – | Nov 23 | The do_tmem_op function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 allow local guest OS users to cause a denial of service (host crash) and possibly have other… Affected: 4.0.0; 4.1.0; 4.2.0 |
| CVE-2012-4411 | – | Nov 23 | The graphical console in Xen 4.0, 4.1 and 4.2 allows local OS guest administrators to obtain sensitive host resource information via the qemu monitor Affected: 4.0.0; 4.1.0; 4.2.0 |
| CVE-2012-3516 | – | Nov 23 | The GNTTABOP_swap_grant_ref sub-operation in the grant table hypercall in Xen 4.2 and Citrix XenServer 6.0.2 allows local guest kernels or administrators to cause a denial of… Affected: 4.2.0 |
| CVE-2012-3515 | – | Nov 23 | Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend, allows local OS guest users to gain privileges via a… Affected: 4.0.0; 4.1.0 |
| CVE-2012-3498 | – | Nov 23 | PHYSDEVOP_map_pirq in Xen 4.1 and 4.2 and Citrix XenServer 6.0.2 and earlier allows local HVM guest OS kernels to cause a denial of service (host crash) and possibly read… Affected: 4.1.0; 4.2.0 |
| CVE-2012-3497 | – | Nov 23 | (1) TMEMC_SAVE_GET_CLIENT_WEIGHT, (2) TMEMC_SAVE_GET_CLIENT_CAP, (3) TMEMC_SAVE_GET_CLIENT_FLAGS and (4) TMEMC_SAVE_END in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2… Affected: 4.0.0; 4.1.0; 4.2.0 |
| CVE-2012-3496 | – | Nov 23 | XENMEM_populate_physmap in Xen 4.0, 4.1, and 4.2, and Citrix XenServer 6.0.2 and earlier, when translating paging mode is not used, allows local PV OS guest kernels to cause a… Affected: 4.0.0; 4.1.0; 4.2.0 |
| CVE-2012-3495 | – | Nov 23 | The physdev_get_free_pirq hypercall in arch/x86/physdev.c in Xen 4.1.x and Citrix XenServer 6.0.2 and earlier uses the return value of the get_free_pirq function as an array index… Affected: 4.1.0; 4.1.1; 4.1.2; 4.1.3 |
| CVE-2012-3494 | – | Nov 23 | The set_debugreg hypercall in include/asm-x86/debugreg.h in Xen 4.0, 4.1, and 4.2, and Citrix XenServer 6.0.2 and earlier, when running on x86-64 systems, allows local OS guest… Affected: 4.0.0; 4.0.0; 4.1.0; 4.1.0; 4.2.0; 4.2.0 |
| CVE-2012-4539 | – | Nov 21 | Xen 4.0 through 4.2, when running 32-bit x86 PV guests on 64-bit hypervisors, allows local guest OS administrators to cause a denial of service (infinite loop and hang or crash)… Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.1.0; +4 more |
| CVE-2012-4537 | – | Nov 21 | Xen 3.4 through 4.2, and possibly earlier versions, does not properly synchronize the p2m and m2p tables when the set_p2m_entry function fails, which allows local HVM guest OS… Affected: 3.4.0; 3.4.1; 3.4.2; 3.4.3; 3.4.4; 4.0.0; +9 more |
| CVE-2012-4536 | – | Nov 21 | The (1) domain_pirq_to_emuirq and (2) physdev_unmap_pirq functions in Xen 2.2 allows local guest OS administrators to cause a denial of service (Xen crash) via a crafted pirq… Affected: 2.2.0 |
| CVE-2012-4535 | – | Nov 21 | Xen 3.4 through 4.2, and possibly earlier versions, allows local guest OS administrators to cause a denial of service (Xen infinite loop and physical CPU consumption) by setting a… Affected: 3.4.0; 3.4.1; 3.4.2; 3.4.3; 3.4.4; 4.0.0; +9 more |
| CVE-2012-4544 | – | Oct 31 | The PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk (1) before or (2) after decompression, which allows local guest administrators to… Affected: through 4.2.0; 4.1.0; 4.1.1; 4.1.2; 4.1.3 |
| CVE-2012-2625 | – | Oct 31 | The PyGrub boot loader in Xen unstable before changeset 25589:60f09d1ab1fe, 4.2.x, and 4.1.x allows local para-virtualized guest users to cause a denial of service (memory… Affected: 4.1.0; 4.1.1; 4.1.2; 4.1.3; 4.2.0 |
| CVE-2012-0217 | – | Jun 12 | The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer 6.0.2 and earlier and other products; Oracle Solaris 11 and earlier; illumos… Affected: through 4.1.2; 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; +2 more |
| CVE-2009-3525 | – | Oct 5 | The pyGrub boot loader in Xen 3.0.3, 3.3.0, and Xen-3.3.1 does not support the password option in grub.conf for para-virtualized guests, which allows attackers with access to the… Affected: 3.0.3; 3.3.0; 3.3.1 |
| CVE-2009-1758 | – | May 22 | The hypervisor_callback function in Xen, possibly before 3.4.0, as applied to the Linux kernel 2.6.30-rc4, 2.6.18, and probably other versions allows guest user applications to… Affected: through 3.3.1; 2.0; 3.0.2; 3.0.3; 3.0.4; 3.1.2; +8 more |
| CVE-2008-4993 | – | Nov 7 | qemu-dm.debug in Xen 3.2.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/args temporary file Affected: 3.2.1 |
| CVE-2008-3687 | – | Aug 14 | Heap-based buffer overflow in the flask_security_label function in Xen 3.3, when compiled with the XSM:FLASK module, allows unprivileged domain users (domU) to execute arbitrary… Affected: 3.3 |
| CVE-2007-6416 | – | Dec 17 | The copy_to_user function in the PAL emulation functionality for Xen 3.1.2 and earlier, when running on ia64 systems, allows HVM guest users to access arbitrary physical memory by… Affected: 3.1.2 |