XE
Product
Xen
490
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 16High 134Medium 162Low 11
Watch
Add Xen to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-1666 | – | Jan 26 | The do_physdev_op function in Xen 4.1.5, 4.1.6.1, 4.2.2 through 4.2.3, and 4.3.x does not properly restrict access to the (1) PHYSDEVOP_prepare_msix and (2) PHYSDEVOP_release_msix… Affected: 4.1.5; 4.1.6.1; 4.2.2; 4.2.3; 4.3.0; 4.3.1 |
| CVE-2014-1642 | – | Jan 26 | The IRQ setup in Xen 4.2.x and 4.3.x, when using device passthrough and configured to support a large number of CPUs, frees certain memory that may still be intended for use,… Affected: 4.2.0; 4.2.1; 4.2.2; 4.2.3; 4.3.0; 4.3.1 |
| CVE-2013-4375 | – | Jan 19 | The qdisk PV disk backend in qemu-xen in Xen 4.2.x and 4.3.x before 4.3.1, and qemu 1.1 and other versions, allows local HVM guests to cause a denial of service (domain grant… Affected: 4.2.0; 4.2.1; 4.2.2; 4.2.3; 4.3.0 |
| CVE-2011-1936 | – | Jan 7 | Xen, when using x86 Intel processors and the VMX virtualization extension is enabled, does not properly handle cpuid instruction emulation when exiting the VM, which allows local… Affected: All versions, or not specified |
| CVE-2011-1780 | – | Jan 7 | The instruction emulation in Xen 3.0.3 allows local SMP guest users to cause a denial of service (host crash) by replacing the instruction that causes the VM to exit in one thread… Affected: 3.0.3 |
| CVE-2011-1763 | – | Jan 7 | The get_free_port function in Xen allows local authenticated DomU users to cause a denial of service or possibly gain privileges via unspecified vectors involving a new event… Affected: All versions, or not specified |
| CVE-2011-1166 | – | Jan 7 | Xen, possibly before 4.0.2, allows local 64-bit PV guests to cause a denial of service (host crash) by specifying user mode execution without user-mode pagetables Affected: through 4.0.1; 3.0.2; 3.0.3; 3.0.4; 3.1.3; 3.1.4; +13 more |
| CVE-2011-2519 | – | Dec 27 | Xen in the Linux kernel, when running a guest on a host without hardware assisted paging (HAP), allows guest users to cause a denial of service (invalid pointer dereference and… Affected: before 3.3.0 |
| CVE-2013-4554 | – | Dec 24 | Xen 3.0.3 through 4.1.x (possibly 4.1.6.1), 4.2.x (possibly 4.2.3), and 4.3.x (possibly 4.3.1) does not properly prevent access to hypercalls, which allows local guest users to… Affected: 3.0.3; 3.0.4; 3.1.3; 3.1.4; 3.2.0; 3.2.1; +28 more |
| CVE-2013-4553 | – | Dec 24 | The XEN_DOMCTL_getmemlist hypercall in Xen 3.4.x through 4.3.x (possibly 4.3.1) does not always obtain the page_alloc_lock and mm_rwlock in the same order, which allows local… Affected: 3.4.0; 3.4.1; 3.4.2; 3.4.3; 3.4.4; 4.0.0; +17 more |
| CVE-2013-6400 | – | Dec 13 | Xen 4.2.x and 4.3.x, when using Intel VT-d and a PCI device has been assigned, does not clear the flag that suppresses IOMMU TLB flushes when unspecified errors occur, which… Affected: 4.2.0; 4.2.1; 4.2.2; 4.2.3; 4.3.0; 4.3.1 |
| CVE-2013-6375 | – | Nov 23 | Xen 4.2.x and 4.3.x, when using Intel VT-d for PCI passthrough, does not properly flush the TLB after clearing a present translation table entry, which allows local guest… Affected: 4.2.1; 4.2.2; 4.2.3; 4.3.0; 4.3.1 |
| CVE-2013-4551 | – | Nov 18 | Xen 4.2.x and 4.3.x, when nested virtualization is disabled, does not properly check the emulation paths for (1) VMLAUNCH and (2) VMRESUME, which allows local HVM guest users to… Affected: 4.2.0; 4.2.1; 4.2.2; 4.2.3; 4.3.0; 4.3.1 |
| CVE-2013-4416 | – | Nov 2 | The Ocaml xenstored implementation (oxenstored) in Xen 4.1.x, 4.2.x, and 4.3.x allows local guest domains to cause a denial of service (domain shutdown) via a large message reply Affected: 4.1.0; 4.1.1; 4.1.2; 4.1.3; 4.1.4; 4.1.5; +7 more |
| CVE-2013-4494 | – | Nov 2 | Xen before 4.1.x, 4.2.x, and 4.3.x does not take the page_alloc_lock and grant_table.lock in the same order, which allows local guest administrators with access to multiple vcpus… Affected: 4.1.0 through 4.1.6.1; 4.2.0 through 4.2.5; 4.3.0 through 4.3.4 |
| CVE-2013-4371 | – | Oct 17 | Use-after-free vulnerability in the libxl_list_cpupool function in the libxl toolstack library in Xen 4.2.x and 4.3.x, when running "under memory pressure," returns the original… Affected: 4.2.0; 4.2.1; 4.2.2; 4.2.3; 4.3.0 |
| CVE-2013-4370 | – | Oct 17 | The ocaml binding for the xc_vcpu_getaffinity function in Xen 4.2.x and 4.3.x frees certain memory that may still be intended for use, which allows local users to cause a denial… Affected: 4.2.0; 4.2.1; 4.2.2; 4.2.3; 4.3.0 |
| CVE-2013-4369 | – | Oct 17 | The xlu_vif_parse_rate function in the libxlu library in Xen 4.2.x and 4.3.x allows local users to cause a denial of service (NULL pointer dereference) by using the "@" character… Affected: 4.2.0; 4.2.1; 4.2.2; 4.2.3; 4.3.0 |
| CVE-2013-4368 | – | Oct 17 | The outs instruction emulation in Xen 3.1.x, 4.2.x, 4.3.x, and earlier, when using FS: or GS: segment override, uses an uninitialized variable as a segment base, which allows… Affected: through 4.3.0; 3.0.2; 3.0.3; 3.0.4; 3.1.3; 3.1.4; +28 more |
| CVE-2013-4356 | – | Oct 9 | Xen 4.3.x writes hypervisor mappings to certain shadow pagetables when live migration is performed on hosts with more than 5TB of RAM, which allows local 64-bit PV guests to read… Affected: 4.3.0 |
| CVE-2013-4361 | – | Oct 1 | The fbld instruction emulation in Xen 3.3.x through 4.3.x does not use the correct variable for the source effective address, which allows local HVM guests to obtain hypervisor… Affected: 3.3.0; 3.3.1; 3.3.2; 3.4.0; 3.4.1; 3.4.2; +17 more |
| CVE-2013-4355 | – | Oct 1 | Xen 4.3.x and earlier does not properly handle certain errors, which allows local HVM guests to obtain hypervisor stack memory via a (1) port or (2) memory mapped I/O write or (3)… Affected: through 4.3.0; 3.0.2; 3.0.3; 3.0.4; 3.1.3; 3.1.4; +27 more |
| CVE-2011-2901 | – | Oct 1 | Off-by-one error in the __addr_ok macro in Xen 3.3 and earlier allows local 64 bit PV guest administrators to cause a denial of service (host crash) via unspecified hypercalls… Affected: through 3.3.0; 3.0.2; 3.0.3; 3.0.4; 3.1.3; 3.1.4; +4 more |
| CVE-2013-1442 | – | Sep 30 | Xen 4.0 through 4.3.x, when using AVX or LWP capable CPUs, does not properly clear previous data from registers when using an XSAVE or XRSTOR to extend the state components of a… Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.1.0; +10 more |
| CVE-2013-4329 | – | Sep 12 | The xenlight library (libxl) in Xen 4.0.x through 4.2.x, when IOMMU is disabled, provides access to a busmastering-capable PCI passthrough device before the IOMMU setup is… Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.1.0; +9 more |
| CVE-2013-3495 | – | Aug 28 | The Intel VT-d Interrupt Remapping engine in Xen 3.3.x through 4.3.x allows local guests to cause a denial of service (kernel panic) via a malformed Message Signaled Interrupt… Affected: 3.3.0; 3.3.1; 3.3.2; 3.4.0; 3.4.1; 3.4.2; +17 more |
| CVE-2013-2212 | – | Aug 28 | The vmx_set_uc_mode function in Xen 3.3 through 4.3, when disabling caches, allows local HVM guests with access to memory mapped I/O regions to cause a denial of service (CPU… Affected: 3.3.0; 3.3.1; 3.3.2; 3.4.0; 3.4.1; 3.4.2; +17 more |
| CVE-2013-2211 | – | Aug 28 | The libxenlight (libxl) toolstack library in Xen 4.0.x, 4.1.x, and 4.2.x uses weak permissions for xenstore keys for paravirtualised and emulated serial console devices, which… Affected: 4.2.0; 4.2.1; 4.2.2; 4.1.0; 4.1.1; 4.1.2; +8 more |
| CVE-2013-2077 | – | Aug 28 | Xen 4.0.x, 4.1.x, and 4.2.x does not properly restrict the contents of a XRSTOR, which allows local PV guest users to cause a denial of service (unhandled exception and hypervisor… Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.1.0; +8 more |
| CVE-2013-2076 | – | Aug 28 | Xen 4.0.x, 4.1.x, and 4.2.x, when running on AMD64 processors, only save/restore the FOP, FIP, and FDP x87 registers in FXSAVE/FXRSTOR when an exception is pending, which allows… Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.2.0; +8 more |
| CVE-2013-2072 | – | Aug 28 | Buffer overflow in the Python bindings for the xc_vcpu_setaffinity call in Xen 4.0.x, 4.1.x, and 4.2.x allows local administrators with permissions to configure VCPU affinity to… Affected: 4.1.0; 4.1.1; 4.1.2; 4.1.3; 4.1.4; 4.1.5; +8 more |
| CVE-2013-1432 | – | Aug 28 | Xen 4.1.x and 4.2.x, when the XSA-45 patch is in place, does not properly maintain references on pages stored for deferred cleanup, which allows local PV guest kernels to cause a… Affected: 4.2.0; 4.2.1; 4.2.2; 4.1.0; 4.1.1; 4.1.2; +3 more |
| CVE-2013-2196 | – | Aug 23 | Multiple unspecified vulnerabilities in the Elf parser (libelf) in Xen 4.2.x and earlier allow local guest administrators with certain permissions to have an unspecified impact… Affected: through 4.2.2; 4.2.0; 4.2.1 |
| CVE-2013-2195 | – | Aug 23 | The Elf parser (libelf) in Xen 4.2.x and earlier allow local guest administrators with certain permissions to have an unspecified impact via a crafted kernel, related to "pointer… Affected: through 4.2.2; 4.2.0; 4.2.1 |
| CVE-2013-2194 | – | Aug 23 | Multiple integer overflows in the Elf parser (libelf) in Xen 4.2.x and earlier allow local guest administrators with certain permissions to have an unspecified impact via a… Affected: through 4.2.2; 4.2.0; 4.2.1 |
| CVE-2013-2078 | – | Aug 14 | Xen 4.0.2 through 4.0.4, 4.1.x, and 4.2.x allows local PV guest users to cause a denial of service (hypervisor crash) via certain bit combinations to the XSETBV instruction Affected: 4.0.2; 4.0.3; 4.0.4; 4.1.0; 4.1.1; 4.1.2; +6 more |
| CVE-2013-1964 | – | May 21 | Xen 4.0.x and 4.1.x incorrectly releases a grant reference when releasing a non-v1, non-transitive grant, which allows local guest administrators to cause a denial of service… Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.1.0; +5 more |
| CVE-2013-1952 | – | May 13 | Xen 4.x, when using Intel VT-d for a bus mastering capable PCI device, does not properly check the source when accessing a bridge device's interrupt remapping table entries for… Affected: 4.0.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.1.0; +7 more |
| CVE-2013-1922 | – | May 13 | qemu-nbd in QEMU, as used in Xen 4.2.x, determines the format of a raw disk image based on the header, which allows local guest OS administrators to read arbitrary files on the… Affected: 4.2.0; 4.2.1; 4.2.2 |
| CVE-2013-1919 | – | May 13 | Xen 4.2.x and 4.1.x does not properly restrict access to IRQs, which allows local stub domain clients to gain access to IRQs and cause a denial of service via vectors related to… Affected: 4.1.0; 4.1.1; 4.1.2; 4.1.3; 4.1.4; 4.1.5; +3 more |
| CVE-2013-1918 | – | May 13 | Certain page table manipulation operations in Xen 4.1.x, 4.2.x, and earlier are not preemptible, which allows local PV kernels to cause a denial of service via vectors related to… Affected: 4.1.0; 4.1.1; 4.1.2; 4.1.3; 4.1.4; 4.1.5; +3 more |
| CVE-2013-1917 | – | May 13 | Xen 3.1 through 4.x, when running 64-bit hosts on Intel CPUs, does not clear the NT flag when using an IRET after a SYSENTER instruction, which allows PV guest users to cause a… Affected: 3.1.3; 3.1.4; 3.2.0; 3.2.1; 3.2.2; 3.2.3; +21 more |
| CVE-2013-1920 | – | Apr 12 | Xen 4.2.x, 4.1.x, and earlier, when the hypervisor is running "under memory pressure" and the Xen Security Module (XSM) is enabled, uses the wrong ordering of operations when… Affected: 3.0.2; 3.0.3; 3.0.4; 3.1.3; 3.1.4; 3.2.0; +23 more |
| CVE-2013-0215 | – | Mar 7 | oxenstored in Xen 4.1.x, Xen 4.2.x, and xen-unstable does not properly consider the state of the Xenstore ring during read operations, which allows guest OS users to cause a… Affected: 4.1.0; 4.1.1; 4.1.2; 4.1.3; 4.1.4; 4.2.0; +1 more |
| CVE-2013-0151 | – | Mar 7 | The do_hvm_op function in xen/arch/x86/hvm/hvm.c in Xen 4.2.x on the x86_32 platform does not prevent HVM_PARAM_NESTEDHVM (aka nested virtualization) operations, which allows… Affected: 4.2.0; 4.2.1 |
| CVE-2013-0153 | – | Feb 14 | The AMD IOMMU support in Xen 4.2.x, 4.1.x, 3.3, and other versions, when using AMD-Vi for PCI passthrough, uses the same interrupt remapping table for the host and all guests,… Affected: 4.2.0; 4.2.1; 4.1.0; 4.1.1; 4.1.2; 4.1.3; +2 more |
| CVE-2012-5634 | – | Feb 14 | Xen 4.2.x, 4.1.x, and 4.0, when using Intel VT-d for PCI passthrough, does not properly configure VT-d when supporting a device that is behind a legacy PCI Bridge, which allows… Affected: 4.0.0; 4.1.0; 4.1.1; 4.1.2; 4.1.3; 4.1.4; +2 more |
| CVE-2013-0231 | – | Feb 13 | The pciback_enable_msi function in the PCI backend driver (drivers/xen/pciback/conf_space_capability_msi.c) in Xen for the Linux kernel 2.6.18 and 3.8 allows guest OS users with… Affected: 3.0.2; 3.0.3; 3.0.4; 3.1.3; 3.1.4; 3.2.0; +3 more |
| CVE-2013-0152 | – | Feb 13 | Memory leak in Xen 4.2 and unstable allows local HVM guests to cause a denial of service (host memory consumption) by performing nested virtualization in a way that triggers… Affected: 4.2.0 |
| CVE-2013-0154 | – | Jan 12 | The get_page_type function in xen/arch/x86/mm.c in Xen 4.2, when debugging is enabled, allows local PV or HVM guest administrators to cause a denial of service (assertion failure… Affected: 4.2.0 |