XE
Product
Xen
490
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 16High 134Medium 162Low 11
Watch
Add Xen to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-46835 | 5.5 | Jan 5 | The current setup of the quarantine page tables assumes that the quarantine domain (dom_io) has been initialized with an address width of DEFAULT_DOMAIN_ADDRESS_WIDTH (48) and… Affected: All versions, or not specified |
| CVE-2023-34328 | 5.5 | Jan 5 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] AMD CPUs since ~2014 have extensions to normal… Affected: 4.5.0 before 4.14.0 |
| CVE-2023-34327 | 5.5 | Jan 5 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] AMD CPUs since ~2014 have extensions to normal… Affected: 4.5.0 and later |
| CVE-2023-34323 | 5.5 | Jan 5 | When a transaction is committed, C Xenstored will first check the quota is correct before attempting to commit any nodes Affected: before 4.17.0 |
| CVE-2023-34320 | 5.5 | Dec 8 | Cortex-A77 cores (r0p0 and r1p0) are affected by erratum 1508412 where software, under certain circumstances, could deadlock a core due to the execution of either a load to device… Affected: All versions, or not specified |
| CVE-2023-20588 | 5.5 | Aug 8 | A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality Affected: All versions, or not specified |
| CVE-2023-20593 | 5.5 | Jul 24 | An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information Affected: 4.14.0; 4.15.0; 4.16.0; 4.17.0 |
| CVE-2022-42331 | 5.5 | Mar 21 | x86: speculative vulnerability in 32bit SYSCALL path Due to an oversight in the very original Spectre/Meltdown security work (XSA-254), one entrypath performs its… Affected: 4.5.0 through 4.17.0 |
| CVE-2022-23824 | 5.5 | Nov 9 | IBPB may not prevent return branch predictions from being specified by pre-IBPB branch targets leading to a potential information disclosure Affected: All versions, or not specified |
| CVE-2022-42325 | 5.5 | Nov 1 | Xenstore: Guests can create arbitrary number of nodes via transactions T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities… Affected: 4.9.0 and later |
| CVE-2022-42324 | 5.5 | Nov 1 | Oxenstored 32->31 bit integer truncation issues Integers in Ocaml are 63 or 31 bits of signed precision Affected: All versions, or not specified |
| CVE-2022-42326 | 5.5 | Nov 1 | Xenstore: Guests can create arbitrary number of nodes via transactions T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities… Affected: 4.9.0 and later |
| CVE-2022-42322 | 5.5 | Nov 1 | Xenstore: Cooperating guests can create arbitrary numbers of nodes T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities… Affected: All versions, or not specified |
| CVE-2022-42310 | 5.5 | Nov 1 | Xenstore: Guests can create orphaned Xenstore nodes By creating multiple nodes inside a transaction resulting in an error, a malicious guest can create orphaned nodes in the… Affected: 4.9.0 before 4.13.0 |
| CVE-2022-42323 | 5.5 | Nov 1 | Xenstore: Cooperating guests can create arbitrary numbers of nodes T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities… Affected: All versions, or not specified |
| CVE-2022-21127 | 5.5 | Jun 15 | Incomplete cleanup in specific special register read operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local… Affected: All versions, or not specified |
| CVE-2022-21166 | 5.5 | Jun 15 | Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via… Affected: All versions, or not specified |
| CVE-2022-21125 | 5.5 | Jun 15 | Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access Affected: All versions, or not specified |
| CVE-2022-21123 | 5.5 | Jun 15 | Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access Affected: All versions, or not specified |
| CVE-2022-23034 | 5.5 | Jan 25 | A PV guest could DoS Xen while unmapping a grant To address XSA-380, reference counting was introduced for grant mappings for the case where a PV guest would have the IOMMU… Affected: 3.2.0 before 4.13.0 |
| CVE-2021-28699 | 5.5 | Aug 27 | inadequate grant-v2 status frames array bounds check The v2 grant table interface separates grant attributes from grant status Affected: 4.10.0 and later |
| CVE-2021-28698 | 5.5 | Aug 27 | long running loops in grant table handling In order to properly monitor resource use, Xen maintains information on the grant mappings a domain may create to map grants offered by… Affected: 3.2.0 and later |
| CVE-2021-28693 | 5.5 | Jun 30 | xen/arm: Boot modules are not scrubbed The bootloader will load boot modules (e.g Affected: 4.12.0 through 4.15.0; 4.15.0 |
| CVE-2021-28689 | 5.5 | Jun 11 | x86: Speculative vulnerabilities with bare (non-shim) 32-bit PV guests 32-bit x86 PV guest kernels run in ring 1 Affected: before 4.12.0 |
| CVE-2021-28687 | 5.5 | Jun 11 | HVM soft-reset crashes toolstack libxl requires all data structures passed across its public interface to be initialized before use and disposed of afterwards by calling a… Affected: 4.12 through 4.15.0; 4.15.0 |
| CVE-2021-26314 | 5.5 | Jun 9 | Potential floating point value injection in all supported CPU products, in conjunction with software vulnerabilities relating to speculative execution with incorrect floating… Affected: All versions, or not specified |
| CVE-2021-26313 | 5.5 | Jun 9 | Potential speculative code store bypass in all supported CPU products, in conjunction with software vulnerabilities relating to speculative execution of overwritten instructions,… Affected: All versions, or not specified |
| CVE-2021-26933 | 5.5 | Feb 17 | An issue was discovered in Xen 4.9 through 4.14.x Affected: 4.9.0 through 4.14.1 |
| CVE-2021-3308 | 5.5 | Jan 26 | An issue was discovered in Xen 4.12.3 through 4.12.4 and 4.13.1 through 4.14.x Affected: 4.13.1 through 4.14.1; 4.12.3; 4.12.4 |
| CVE-2020-29485 | 5.5 | Dec 15 | An issue was discovered in Xen 4.6 through 4.14.x Affected: 4.6.0 through 4.14.0 |
| CVE-2020-29566 | 5.5 | Dec 15 | An issue was discovered in Xen through 4.14.x Affected: through 4.14.0 |
| CVE-2020-27673 | 5.5 | Oct 22 | An issue was discovered in the Linux kernel through 5.9.1, as used with Xen through 4.14.x Affected: through 4.14.0 |
| CVE-2020-25601 | 5.5 | Sep 23 | An issue was discovered in Xen through 4.14.x Affected: through 4.14.0 |
| CVE-2020-25600 | 5.5 | Sep 23 | An issue was discovered in Xen through 4.14.x Affected: 4.4.0 through 4.14.0 |
| CVE-2020-25598 | 5.5 | Sep 23 | An issue was discovered in Xen 4.14.x Affected: 4.12.0 through 4.14.0 |
| CVE-2020-25596 | 5.5 | Sep 23 | An issue was discovered in Xen through 4.14.x Affected: 3.2.0 through 4.14.0 |
| CVE-2020-11743 | 5.5 | Apr 14 | An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of service because of a bad error path in GNTTABOP_map_grant Affected: through 4.13.0; 4.13.0; 4.13.0 |
| CVE-2020-11742 | 5.5 | Apr 14 | An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of service because of bad continuation handling in GNTTABOP_copy Affected: through 4.13.0; 4.13.0; 4.13.0 |
| CVE-2020-11740 | 5.5 | Apr 14 | An issue was discovered in xenoprof in Xen through 4.13.x, allowing guest OS users (without active profiling) to obtain sensitive information about other guests Affected: 3.2.0 through 4.13.0; 4.13.0; 4.13.0 |
| CVE-2019-17349 | 5.5 | Oct 8 | An issue was discovered in Xen through 4.12.x allowing Arm domU attackers to cause a denial of service (infinite loop) involving a LoadExcl or StoreExcl operation Affected: through 4.12.1 |
| CVE-2019-17350 | 5.5 | Oct 8 | An issue was discovered in Xen through 4.12.x allowing Arm domU attackers to cause a denial of service (infinite loop) involving a compare-and-exchange operation Affected: through 4.12.1 |
| CVE-2017-14431 | 5.5 | Sep 13 | Memory leak in Xen 3.3 through 4.8.x allows guest OS users to cause a denial of service (ARM or x86 AMD host OS memory consumption) by continually rebooting, because certain… Affected: 3.3.0; 3.3.1; 3.3.2; 3.4.0; 3.4.1; 3.4.2; +34 more |
| CVE-2016-9378 | 5.5 | Feb 22 | Xen 4.5.x through 4.7.x on AMD systems without the NRip feature, when emulating instructions that generate software interrupts, allows local HVM guest OS users to cause a denial… Affected: 4.5.0; 4.5.1; 4.5.2; 4.5.3; 4.5.5; 4.6.0; +5 more |
| CVE-2016-9377 | 5.5 | Feb 22 | Xen 4.5.x through 4.7.x on AMD systems without the NRip feature, when emulating instructions that generate software interrupts, allows local HVM guest OS users to cause a denial… Affected: 4.5.0; 4.5.1; 4.5.2; 4.5.3; 4.5.5; 4.6.0; +5 more |
| CVE-2016-10025 | 5.5 | Jan 26 | VMFUNC emulation in Xen 4.6.x through 4.8.x on x86 systems using AMD virtualization extensions (aka SVM) allows local HVM guest OS users to cause a denial of service (hypervisor… Affected: 4.6.0; 4.6.1; 4.6.3; 4.6.4; 4.7.0; 4.7.1; +1 more |
| CVE-2016-3961 | 5.5 | Apr 15 | Xen and the Linux kernel through 4.5.x do not properly suppress hugetlbfs support in x86 PV guests, which allows local PV guest OS users to cause a denial of service (guest OS… Affected: through 4.5.3 |
| CVE-2016-2271 | 5.5 | Feb 19 | VMX in Xen 4.6.x and earlier, when using an Intel or Cyrix CPU, allows local HVM guest users to cause a denial of service (guest crash) via vectors related to a non-canonical RIP Affected: 4.6.0; 4.6.1 |
| CVE-2023-46839 | 5.3 | Mar 20 | PCI devices can make use of a functionality called phantom functions, that when enabled allows the device to generate requests using the IDs of functions that are otherwise… Affected: All versions, or not specified |
| CVE-2020-27674 | 5.3 | Oct 22 | An issue was discovered in Xen through 4.14.x allowing x86 PV guest OS users to gain guest OS privileges by modifying kernel memory contents, because invalidation of TLB entries… Affected: through 4.14.0 |
| CVE-2015-8615 | 5.0 | Jan 8 | The hvm_set_callback_via function in arch/x86/hvm/irq.c in Xen 4.6 does not limit the number of printk console messages when logging the new callback method, which allows local… Affected: 4.6.0 |