XE
Product
Xen
490
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 16High 134Medium 162Low 11
Watch
Add Xen to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-2756 | – | Apr 1 | QEMU, as used in Xen 3.3.x through 4.5.x, does not properly restrict access to PCI command registers, which might allow local HVM guest users to cause a denial of service… Affected: 4.3.0; 4.3.1; 4.3.2; 4.4.0; 4.4.1; 4.5.0 |
| CVE-2015-2752 | – | Apr 1 | The XEN_DOMCTL_memory_mapping hypercall in Xen 3.2.x through 4.5.x, when using a PCI passthrough device, is not preemptible, which allows local x86 HVM domain users to cause a… Affected: 4.3.0; 4.3.1; 4.3.2; 4.4.0; 4.4.1; 4.5.0 |
| CVE-2015-2751 | – | Apr 1 | Xen 4.3.x, 4.4.x, and 4.5.x, when using toolstack disaggregation, allows remote domains with partial management control to cause a denial of service (host lock) via unspecified… Affected: 4.3.0; 4.3.1; 4.3.2; 4.4.0; 4.4.0; 4.4.1; +1 more |
| CVE-2015-2152 | – | Mar 18 | Xen 4.5.x and earlier enables certain default backends when emulating a VGA device for an x86 HVM guest qemu even when the configuration disables them, which allows local guest… Affected: through 4.5.0 |
| CVE-2015-2151 | – | Mar 12 | The x86 emulator in Xen 3.2.x through 4.5.x does not properly ignore segment overrides for instructions with register operands, which allows local guest users to obtain sensitive… Affected: 3.2.0; 3.2.1; 3.2.2; 3.2.3; 3.3.0; 3.3.1; +28 more |
| CVE-2015-2150 | – | Mar 12 | Xen 3.3.x through 4.5.x and the Linux kernel through 3.19.1 do not properly restrict access to PCI command registers, which might allow local guest OS users to cause a denial of… Affected: 3.3.0; 3.3.1; 3.3.2; 3.4.0; 3.4.1; 3.4.2; +24 more |
| CVE-2015-2045 | – | Mar 12 | The HYPERVISOR_xen_version hypercall in Xen 3.2.x through 4.5.x does not properly initialize data structures, which allows local guest users to obtain sensitive information via… Affected: 3.2.0; 3.2.1; 3.2.2; 3.2.3; 3.3.0; 3.3.1; +28 more |
| CVE-2015-2044 | – | Mar 12 | The emulation routines for unspecified X86 devices in Xen 3.2.x through 4.5.x does not properly initialize data, which allow local HVM guest users to obtain sensitive information… Affected: 3.2.0; 3.2.1; 3.2.2; 3.2.3; 3.3.0; 3.3.1; +28 more |
| CVE-2015-0268 | – | Feb 16 | The vgic_v2_to_sgi function in arch/arm/vgic-v2.c in Xen 4.5.x, when running on ARM hardware with general interrupt controller (GIC) version 2, allows local guest users to cause a… Affected: 4.5.0 |
| CVE-2015-1563 | – | Feb 9 | The ARM GIC distributor virtualization in Xen 4.4.x and 4.5.x allows local guests to cause a denial of service by causing a large number messages to be logged Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.1.0; +16 more |
| CVE-2014-6268 | – | Jan 12 | The evtchn_fifo_set_pending function in Xen 4.4.x allows local guest users to cause a denial of service (host crash) via vectors involving an uninitialized FIFO-based event… Affected: 4.4.0; 4.4.0; 4.4.1 |
| CVE-2015-0361 | – | Jan 7 | Use-after-free vulnerability in Xen 4.2.x, 4.3.x, and 4.4.x allows remote domains to cause a denial of service (system crash) via a crafted hypercall during HVM guest teardown Affected: 4.2.0; 4.2.1; 4.2.2; 4.2.3; 4.2.4; 4.2.5; +6 more |
| CVE-2014-9066 | – | Dec 9 | Xen 4.4.x and earlier, when using a large number of VCPUs, does not properly handle read and write locks, which allows local x86 guest users to cause a denial of service (write… Affected: through 4.4.1 |
| CVE-2014-9065 | – | Dec 9 | common/spinlock.c in Xen 4.4.x and earlier does not properly handle read and write locks, which allows local x86 guest users to cause a denial of service (write denial or NMI… Affected: through 4.4.1 |
| CVE-2014-8867 | – | Dec 1 | The acceleration support for the "REP MOVS" instruction in Xen 4.4.x, 3.2.x, and earlier lacks properly bounds checking for memory mapped I/O (MMIO) emulated in the hypervisor,… Affected: through 3.2.0; 3.2.1; 3.2.2; 3.2.3; 4.4.0; 4.4.1 |
| CVE-2014-8866 | – | Dec 1 | The compatibility mode hypercall argument translation in Xen 3.3.x through 4.4.x, when running on a 64-bit hypervisor, allows local 32-bit HVM guests to cause a denial of service… Affected: 3.3.0; 3.3.1; 3.3.2; 3.4.0; 3.4.1; 3.4.2; +22 more |
| CVE-2014-9030 | – | Nov 24 | The do_mmu_update function in arch/x86/mm.c in Xen 3.2.x through 4.4.x does not properly manage page references, which allows remote domains to cause a denial of service by… Affected: 3.2.0; 3.2.1; 3.2.2; 3.2.3; 3.3.0; 3.3.1; +26 more |
| CVE-2014-8595 | – | Nov 19 | arch/x86/x86_emulate/x86_emulate.c in Xen 3.2.1 through 4.4.x does not properly check privileges, which allows local HVM guest users to gain privileges or cause a denial of… Affected: 3.2.1; 3.2.2; 3.2.3; 3.3.0; 3.3.1; 3.3.2; +24 more |
| CVE-2014-8594 | – | Nov 19 | The do_mmu_update function in arch/x86/mm.c in Xen 4.x through 4.4.x does not properly restrict updates to only PV page tables, which allows remote PV guests to cause a denial of… Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.1.0; +12 more |
| CVE-2014-5148 | – | Oct 26 | Xen 4.4.x, when running on an ARM system and "handling an unknown system register access from 64-bit userspace," returns to an instruction of the trap handler for kernel space… Affected: 4.4.1 |
| CVE-2014-7188 | – | Oct 2 | The hvm_msr_read_intercept function in arch/x86/hvm/hvm.c in Xen 4.1 through 4.4.x uses an improper MSR range for x2APIC emulation, which allows local HVM guests to cause a denial… Affected: 4.1.0; 4.1.1; 4.1.2; 4.1.3; 4.1.4; 4.1.5; +10 more |
| CVE-2014-7156 | – | Oct 2 | The x86_emulate function in arch/x86/x86_emulate/x86_emulate.c in Xen 3.3.x through 4.4.x does not check the supervisor mode permissions for instructions that generate software… Affected: 3.3.0; 3.3.1; 3.3.2; 4.1.0; 4.1.1; 4.1.2; +13 more |
| CVE-2014-7155 | – | Oct 2 | The x86_emulate function in arch/x86/x86_emulate/x86_emulate.c in Xen 4.4.x and earlier does not properly check supervisor mode permissions, which allows local HVM users to cause… Affected: through 4.4.0; 3.0.2; 3.0.3; 3.0.4; 3.1.3; 3.1.4; +32 more |
| CVE-2014-7154 | – | Oct 2 | Race condition in HVMOP_track_dirty_vram in Xen 4.0.0 through 4.4.x does not ensure possession of the guarding lock for dirty video RAM tracking, which allows certain local guest… Affected: 4.1.0; 4.1.1; 4.1.2; 4.1.3; 4.1.4; 4.1.5; +10 more |
| CVE-2014-5147 | – | Aug 29 | Xen 4.4.x, when running a 64-bit kernel on an ARM system, does not properly handle traps from the guest domain that use a different address width, which allows local guest users… Affected: 4.4.0; 4.4.0 |
| CVE-2014-5149 | – | Aug 22 | Certain MMU virtualization operations in Xen 4.2.x through 4.4.x, when using shadow pagetables, are not preemptible, which allows local HVM guest to cause a denial of service… Affected: 4.2.0; 4.2.1; 4.2.2; 4.2.3; 4.3.0; 4.3.1; +1 more |
| CVE-2014-5146 | – | Aug 22 | Certain MMU virtualization operations in Xen 4.2.x through 4.4.x before the xsa97-hap patch, when using Hardware Assisted Paging (HAP), are not preemptible, which allows local HVM… Affected: 4.2.0; 4.2.1; 4.2.2; 4.2.3; 4.3.0; 4.3.1; +1 more |
| CVE-2014-4022 | – | Jul 9 | The alloc_domain_struct function in arch/arm/domain.c in Xen 4.4.x, when running on an ARM platform, does not properly initialize the structure containing the grant table pages… Affected: 4.4.0; 4.4.0 |
| CVE-2014-4021 | – | Jun 18 | Xen 3.2.x through 4.4.x does not properly clean memory pages recovered from guests, which allows local guest OS users to obtain sensitive information via unspecified vectors Affected: 3.2.0; 3.2.1; 3.2.2; 3.2.3; 4.0.0; 4.0.1; +18 more |
| CVE-2014-3969 | – | Jun 5 | Xen 4.4.x, when running on an ARM system, does not properly check write permissions on virtual addresses, which allows local guest administrators to gain privileges via… Affected: 4.4.0; 4.4.0 |
| CVE-2014-3968 | – | Jun 5 | The HVMOP_inject_msi function in Xen 4.2.x, 4.3.x, and 4.4.x allows local guest HVM administrators to cause a denial of service (host crash) via a large number of crafted… Affected: 4.3.0; 4.3.1; 4.2.0; 4.2.1; 4.2.2; 4.2.3; +2 more |
| CVE-2014-3967 | – | Jun 5 | The HVMOP_inject_msi function in Xen 4.2.x, 4.3.x, and 4.4.x does not properly check the return value from the IRQ setup check, which allows local HVM guest administrators to… Affected: 4.2.0; 4.2.1; 4.2.2; 4.2.3; 4.4.0; 4.4.0; +2 more |
| CVE-2014-3717 | – | May 19 | Xen 4.4.x does not properly validate the load address for 64-bit ARM guest kernels, which allows local users to read system memory or cause a denial of service (crash) via a… Affected: 4.4.0; 4.4.0 |
| CVE-2014-3716 | – | May 19 | Xen 4.4.x does not properly check alignment, which allows local users to cause a denial of service (crash) via an unspecified field in a DTB header in a 32-bit guest kernel Affected: 4.4.0; 4.4.0 |
| CVE-2014-3715 | – | May 19 | Buffer overflow in Xen 4.4.x allows local users to read system memory or cause a denial of service (crash) via a crafted 32-bit guest kernel, related to searching for an appended… Affected: 4.4.0; 4.4.0 |
| CVE-2014-3714 | – | May 19 | The ARM image loading functionality in Xen 4.4.x does not properly validate kernel length, which allows local users to read system memory or cause a denial of service (crash) via… Affected: 4.4.0; 4.4.0 |
| CVE-2014-3124 | – | May 7 | The HVMOP_set_mem_type control in Xen 4.1 through 4.4.x allows local guest HVM administrators to cause a denial of service (hypervisor crash) or possibly execute arbitrary code by… Affected: 4.1.0; 4.1.1; 4.1.2; 4.1.3; 4.1.4; 4.1.5; +9 more |
| CVE-2014-3125 | – | May 2 | Xen 4.4.x, when running on an ARM system, does not properly context switch the CNTKCTL_EL1 register, which allows local guest users to modify the hardware timers and cause a… Affected: 4.4.0; 4.4.0 |
| CVE-2014-2986 | – | Apr 28 | The vgic_distr_mmio_write function in the virtual guest interrupt controller (GIC) distributor (arch/arm/vgic.c) in Xen 4.4.x, when running on an ARM system, allows local guest… Affected: 4.4.0; 4.4.0 |
| CVE-2014-2915 | – | Apr 24 | Xen 4.4.x, when running on ARM systems, does not properly restrict access to hardware features, which allows local guest users to cause a denial of service (host or guest crash)… Affected: 4.4.0; 4.4.0 |
| CVE-2014-2580 | – | Apr 15 | The netback driver in Xen, when using certain Linux versions that do not allow sleeping in softirq context, allows local guest administrators to cause a denial of service… Affected: All versions, or not specified |
| CVE-2014-1896 | – | Apr 1 | The (1) do_send and (2) do_recv functions in io.c in libvchan in Xen 4.2.x, 4.3.x, and 4.4-RC series allows local guests to cause a denial of service or possibly gain privileges… Affected: 4.2.0; 4.2.1; 4.2.2; 4.2.3; 4.3.0; 4.3.1; +1 more |
| CVE-2014-1895 | – | Apr 1 | Off-by-one error in the flask_security_avc_cachestats function in xsm/flask/flask_op.c in Xen 4.2.x and 4.3.x, when the maximum number of physical CPUs are in use, allows local… Affected: 4.2.0; 4.2.1; 4.2.2; 4.2.3; 4.3.0; 4.3.1 |
| CVE-2014-1894 | – | Apr 1 | Multiple integer overflows in unspecified suboperations in the flask hypercall in Xen 3.2.x and earlier, when XSM is enabled, allow local users to cause a denial of service… Affected: through 3.2.3; 3.0.2; 3.0.3; 3.0.4; 3.1.3; 3.1.4; +3 more |
| CVE-2014-1893 | – | Apr 1 | Multiple integer overflows in the (1) FLASK_GETBOOL and (2) FLASK_SETBOOL suboperations in the flask hypercall in Xen 4.1.x, 3.3.x, 3.2.x, and earlier, when XSM is enabled, allow… Affected: through 4.1.6.1; 3.2.0; 3.2.1; 3.2.2; 3.2.3; 3.3.0; +18 more |
| CVE-2014-1892 | – | Apr 1 | Xen 3.3 through 4.1, when XSM is enabled, allows local users to cause a denial of service via vectors related to a "large memory allocation," a different vulnerability than… Affected: 3.3.0; 3.3.1; 3.3.2; 3.4.0; 3.4.1; 3.4.2; +14 more |
| CVE-2014-1891 | – | Apr 1 | Multiple integer overflows in the (1) FLASK_GETBOOL, (2) FLASK_SETBOOL, (3) FLASK_USER, and (4) FLASK_CONTEXT_TO_SID suboperations in the flask hypercall in Xen 4.3.x, 4.2.x,… Affected: through 4.3.0; 3.2.0; 3.2.1; 3.2.2; 3.2.3; 3.3.0; +19 more |
| CVE-2011-3346 | – | Apr 1 | Buffer overflow in hw/scsi-disk.c in the SCSI subsystem in QEMU before 0.15.2, as used by Xen, might allow local guest users with permission to access the CD-ROM to cause a denial… Affected: All versions, or not specified |
| CVE-2014-2599 | – | Mar 28 | The HVMOP_set_mem_access HVM control operations in Xen 4.1.x for 32-bit and 4.1.x through 4.4.x for 64-bit allow local guest administrators to cause a denial of service (CPU… Affected: 4.1.0; 4.1.0; 4.1.1; 4.1.1; 4.1.2; 4.1.2; +16 more |
| CVE-2014-1950 | – | Feb 14 | Use-after-free vulnerability in the xc_cpupool_getinfo function in Xen 4.1.x through 4.3.x, when using a multithreaded toolstack, does not properly handle a failure by the… Affected: 4.1.1; 4.1.2; 4.1.3; 4.1.4; 4.1.5; 4.1.6.1; +6 more |