CVE-2018-19965

An issue was discovered in Xen through 4.11.x allowing 64-bit PV guest OS users to cause a denial of service host OS crash because GP0 can occur after a non-canonical address is passed to the TLB flushing code. NOTE: this issue exists because of an incorrect CVE-2017-5754 aka Meltdown mitigation...

CVE-2018-19965

An issue was discovered in Xen through 4.11.x allowing 64-bit PV guest OS users to cause a denial of service host OS crash because GP0 can occur after a non-canonical address is passed to the TLB flushing code. NOTE: this issue exists because of an incorrect CVE-2017-5754 aka Meltdown mitigation...

PT-2018-2672

Name of the Vulnerable Software and Affected Versions Xen versions prior to 4.12 Description An issue in Xen allows 64-bit PV guest OS users to cause a denial of service, resulting in a host OS crash. This occurs because a non-canonical address can be passed to the TLB flushing code, leading to a...

Medium: kernel

Issue Overview: When running as a Xen 64-bit PV guest, user mode processes not supposed to be able to access I/O ports may be granted such permission, potentially resulting in one or more of in-guest privilege escalation, guest crashes Denial of Service, or in-guest information leaks. CVE-2016-31...

CVE-2012-2934

Xen 4.0, and 4.1, when running a 64-bit PV guest on "older" AMD CPUs, does not properly protect against a certain AMD processor bug, which allows local guest OS users to cause a denial of service host hang via sequential execution of instructions across a non-canonical boundary, a different...

PT-2012-4375

Name of the Vulnerable Software and Affected Versions Xen versions 4.0 through 4.1 Description The issue allows local guest OS users to cause a denial of service host hang via sequential execution of instructions across a non-canonical boundary on "older" AMD CPUs when running a 64-bit PV guest...