XE
Product
Xen
490
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 16High 134Medium 162Low 11
Watch
Add Xen to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-19964 | 6.5 | Dec 8 | An issue was discovered in Xen 4.11.x allowing x86 guest OS users to cause a denial of service (host OS hang) because the p2m lock remains unavailable indefinitely in certain… Affected: 4.11.0 through 4.11.1 |
| CVE-2018-15469 | 6.5 | Aug 17 | An issue was discovered in Xen through 4.11.x Affected: through 4.11.0 |
| CVE-2018-15470 | 6.5 | Aug 17 | An issue was discovered in Xen through 4.11.x Affected: through 4.11.0 |
| CVE-2018-12893 | 6.5 | Jul 2 | An issue was discovered in Xen through 4.10.x Affected: through 4.10.0 |
| CVE-2018-12891 | 6.5 | Jul 2 | An issue was discovered in Xen through 4.10.x Affected: through 4.10.1 |
| CVE-2018-10981 | 6.5 | May 10 | An issue was discovered in Xen through 4.10.x allowing x86 HVM guest OS users to cause a denial of service (host OS infinite loop) in situations where a QEMU device model attempts… Affected: through 4.10.1 |
| CVE-2018-10471 | 6.5 | Apr 27 | An issue was discovered in Xen through 4.10.x allowing x86 PV guest OS users to cause a denial of service (out-of-bounds zero write and hypervisor crash) via unexpected INT 80… Affected: through 4.10.1 |
| CVE-2018-7542 | 6.5 | Feb 27 | An issue was discovered in Xen 4.8.x through 4.10.x allowing x86 PVH guest OS users to cause a denial of service (NULL pointer dereference and hypervisor crash) by leveraging the… Affected: 4.8.0 through 4.10.0 |
| CVE-2018-7540 | 6.5 | Feb 27 | An issue was discovered in Xen through 4.10.x allowing x86 PV guest OS users to cause a denial of service (host OS CPU hang) via non-preemptable L3/L4 pagetable freeing Affected: through 4.10.0 |
| CVE-2018-5244 | 6.5 | Jan 5 | In Xen 4.10, new infrastructure was introduced as part of an overhaul to how MSR emulation happens for guests Affected: 4.10.0 and later |
| CVE-2017-17046 | 6.5 | Nov 28 | An issue was discovered in Xen through 4.9.x on the ARM platform allowing guest OS users to obtain sensitive information from DRAM after a reboot, because disjoint blocks, and… Affected: through 4.9.1 |
| CVE-2017-17044 | 6.5 | Nov 28 | An issue was discovered in Xen through 4.9.x allowing HVM guest OS users to cause a denial of service (infinite loop and host OS hang) by leveraging the mishandling of Populate on… Affected: through 4.9.1 |
| CVE-2017-15593 | 6.5 | Oct 18 | An issue was discovered in Xen through 4.9.x allowing x86 PV guest OS users to cause a denial of service (memory leak) because reference counts are mishandled Affected: through 4.9.0 |
| CVE-2017-15591 | 6.5 | Oct 18 | An issue was discovered in Xen 4.5.x through 4.9.x allowing attackers (who control a stub domain kernel or tool stack) to cause a denial of service (host OS crash) because of a… Affected: 4.5.0; 4.5.1; 4.5.2; 4.5.3; 4.5.5; 4.6.0; +12 more |
| CVE-2017-15589 | 6.5 | Oct 18 | An issue was discovered in Xen through 4.9.x allowing x86 HVM guest OS users to obtain sensitive information from the host OS (or an arbitrary guest OS) because intercepted I/O… Affected: 4.9.0 |
| CVE-2017-14318 | 6.5 | Sep 12 | An issue was discovered in Xen 4.5.x through 4.9.x Affected: 4.5.0; 4.5.1; 4.5.2; 4.5.3; 4.5.5; 4.6.0; +12 more |
| CVE-2017-12855 | 6.5 | Aug 15 | Xen maintains the _GTF_{read,writ}ing bits as appropriate, to inform the guest that a grant is in use Affected: 4.5.0; 4.5.1; 4.5.2; 4.5.3; 4.5.5; 4.6.0; +12 more |
| CVE-2017-10923 | 6.5 | Jul 5 | Xen through 4.8.x does not validate a vCPU array index upon the sending of an SGI, which allows guest OS users to cause a denial of service (hypervisor crash), aka XSA-225 Affected: 4.6.0; 4.6.1; 4.6.2; 4.6.4; 4.6.5; 4.7.1; +2 more |
| CVE-2017-10919 | 6.5 | Jul 5 | Xen through 4.8.x mishandles virtual interrupt injection, which allows guest OS users to cause a denial of service (hypervisor crash), aka XSA-223 Affected: through 4.8.1 |
| CVE-2016-9818 | 6.5 | Feb 27 | Xen through 4.7.x allows local ARM guest OS users to cause a denial of service (host crash) via vectors involving an asynchronous abort while at HYP Affected: 4.7.0; 4.7.1 |
| CVE-2016-9817 | 6.5 | Feb 27 | Xen through 4.7.x allows local ARM guest OS users to cause a denial of service (host crash) via vectors involving a (1) data or (2) prefetch abort with the ESR_EL2.EA bit set Affected: 4.7.0; 4.7.1 |
| CVE-2016-9816 | 6.5 | Feb 27 | Xen through 4.7.x allows local ARM guest OS users to cause a denial of service (host crash) via vectors involving an asynchronous abort while at EL2 Affected: 4.7.0; 4.7.1 |
| CVE-2016-9815 | 6.5 | Feb 27 | Xen through 4.7.x allows local ARM guest OS users to cause a denial of service (host panic) by sending an asynchronous abort Affected: 4.7.0; 4.7.1 |
| CVE-2016-9384 | 6.5 | Feb 22 | Xen 4.7 allows local guest OS users to obtain sensitive host information by loading a 32-bit ELF symbol table Affected: 4.7.0; 4.7.1 |
| CVE-2014-3672 | 6.5 | May 25 | The qemu implementation in libvirt before 1.3.0 and Xen allows local guest OS users to cause a denial of service (host disk consumption) by writing to stdout or stderr Affected: All versions, or not specified |
| CVE-2015-8553 | 6.5 | Apr 13 | Xen allows guest OS users to obtain sensitive information from uninitialized locations in host OS kernel memory by not enabling memory and I/O decoding control bits Affected: All versions, or not specified |
| CVE-2022-26362 | 6.4 | Jun 9 | x86 pv: Race condition in typeref acquisition Xen maintains a type reference count for pages, in addition to a regular reference count Affected: All versions, or not specified |
| CVE-2016-7777 | 6.3 | Oct 7 | Xen 4.7.x and earlier does not properly honor CR0.TS and CR0.EM, which allows local x86 HVM guest OS users to read or modify FPU, MMX, or XMM register state information belonging… Affected: through 4.7.0 |
| CVE-2016-1571 | 6.3 | Jan 22 | The paging_invlpg function in include/asm-x86/paging.h in Xen 3.3.x through 4.6.x, when using shadow mode paging or nested virtualization is enabled, allows local HVM guest users… Affected: 3.3.0; 3.3.1; 3.3.2; 3.4.0; 3.4.1; 3.4.2; +30 more |
| CVE-2020-29571 | 6.2 | Dec 15 | An issue was discovered in Xen through 4.14.x Affected: 4.4.0 through 4.14.0 |
| CVE-2020-29570 | 6.2 | Dec 15 | An issue was discovered in Xen through 4.14.x Affected: 4.4.0 through 4.14.0 |
| CVE-2020-29567 | 6.2 | Dec 15 | An issue was discovered in Xen 4.14.x Affected: through 4.14.0 |
| CVE-2016-6259 | 6.2 | Aug 2 | Xen 4.5.x through 4.7.x do not implement Supervisor Mode Access Prevention (SMAP) whitelisting in 32-bit exception and event delivery, which allows local 32-bit PV guest OS… Affected: 4.5.0; 4.5.1; 4.5.2; 4.5.3; 4.6.0; 4.6.1; +2 more |
| CVE-2020-29486 | 6.0 | Dec 15 | An issue was discovered in Xen through 4.14.x Affected: through 4.14.0 |
| CVE-2020-29484 | 6.0 | Dec 15 | An issue was discovered in Xen through 4.14.x Affected: through 4.14.0 |
| CVE-2020-29482 | 6.0 | Dec 15 | An issue was discovered in Xen through 4.14.x Affected: through 4.14.0 |
| CVE-2020-25602 | 6.0 | Sep 23 | An issue was discovered in Xen through 4.14.x Affected: 4.11.0 through 4.14.0 |
| CVE-2018-15468 | 6.0 | Aug 17 | An issue was discovered in Xen through 4.11.x Affected: through 4.11.0 |
| CVE-2017-15596 | 6.0 | Oct 18 | An issue was discovered in Xen 4.4.x through 4.9.x allowing ARM guest OS users to cause a denial of service (prevent physical CPU usage) because of lock mishandling upon detection… Affected: 4.4.0; 4.4.0; 4.4.0; 4.4.0; 4.4.0; 4.4.0; +34 more |
| CVE-2016-10024 | 6.0 | Jan 26 | Xen through 4.8.x allows local x86 PV guest OS kernel administrators to cause a denial of service (host hang or crash) by modifying the instruction stream asynchronously while… Affected: through 4.8.0 |
| CVE-2016-9385 | 6.0 | Jan 23 | The x86 segment base write emulation functionality in Xen 4.4.x through 4.7.x allows local x86 PV guest OS administrators to cause a denial of service (host crash) by leveraging… Affected: 4.4.0; 4.4.1; 4.4.2; 4.4.3; 4.4.4; 4.5.0; +10 more |
| CVE-2022-33748 | 5.6 | Oct 11 | lock order inversion in transitive grant copy handling As part of XSA-226 a missing cleanup call was inserted on an error handling path Affected: 4.0 and later |
| CVE-2022-26356 | 5.6 | Apr 5 | Racy interactions between dirty vram tracking and paging log dirty hypercalls Activation of log dirty mode done by XEN_DMOP_track_dirty_vram (was named HVMOP_track_dirty_vram… Affected: 4.0.0 before 4.12.0; 4.13.0 before 4.14.0; 4.15.0 before 4.16.0 |
| CVE-2022-23960 | 5.6 | Mar 12 | Certain Arm Cortex and Neoverse processors through 2022-03-08 do not properly restrict cache speculation, aka Spectre-BHB Affected: All versions, or not specified |
| CVE-2018-19965 | 5.6 | Dec 8 | An issue was discovered in Xen through 4.11.x allowing 64-bit PV guest OS users to cause a denial of service (host OS crash) because #GP[0] can occur after a non-canonical address… Affected: through 4.11.1 |
| CVE-2018-10472 | 5.6 | Apr 27 | An issue was discovered in Xen through 4.10.x allowing x86 HVM guest OS users (in certain configurations) to read arbitrary dom0 files via QMP live insertion of a CDROM, in… Affected: through 4.10.1 |
| CVE-2017-17565 | 5.6 | Dec 12 | An issue was discovered in Xen through 4.9.x allowing PV guest OS users to cause a denial of service (host OS crash) if shadow mode and log-dirty mode are in place, because of an… Affected: through 4.9.1 |
| CVE-2017-14317 | 5.6 | Sep 12 | A domain cleanup issue was discovered in the C xenstore daemon (aka cxenstored) in Xen through 4.9.x Affected: through 4.9.0 |
| CVE-2016-5242 | 5.6 | Jun 7 | The p2m_teardown function in arch/arm/p2m.c in Xen 4.4.x through 4.6.x allows local guest OS users with access to the driver domain to cause a denial of service (NULL pointer… Affected: 4.4.0; 4.4.0; 4.4.1; 4.4.2; 4.4.3; 4.4.4; +6 more |
| CVE-2024-45819 | 5.5 | Dec 19 | libxl leaks data to PVH guests via ACPI tables Affected: 4.8.0 and later |