Lucene search
+L

48 matches found

OSV
OSV
added 2017/12/27 5:08 p.m.9 views

CVE-2017-7154

An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. The issue involves the "Kernel" component. It allows local users to bypass intended memory-read restrictions or cause a denial of service system crash...

6.6CVSS7.3AI score
SaveExploits0References5
CVE
CVE
added 2017/12/25 9:00 p.m.109 views

CVE-2017-7154

CVE-2017-7154 is an Apple kernel issue affecting iOS before 11.2, macOS before 10.13.2, and tvOS before 11.2. Apple’s security content (HT208334) documents kernel-related vulnerabilities (including a Meltdown-type read of kernel memory) and kernel-level memory/read restrictions bypass leading to ...

6.6CVSS5.8AI score0.01134EPSS
SaveExploits5References5Affected Software3
CVE
CVE
added 2017/05/11 2:01 p.m.27 views

CVE-2015-7154

CVE-2015-7154 is rejected/not used and does not represent an active vulnerability entry.

7.4AI score
SaveExploits0
Cvelist
Cvelist
added 2017/05/11 2:01 p.m.9 views

CVE-2015-7154

...

SaveExploits0
Tenable Nessus
Tenable Nessus
added 2016/10/13 12:00 a.m.55 views

SUSE SLES11 Security Update : xen (SUSE-SU-2016:2507-1) (Bunker Buster)

This update for xen fixes several issues. These security issues were fixed : - CVE-2016-7092: The getpagefroml3e function in arch/x86/mm.c in Xen allowed local 32-bit PV guest OS administrators to gain host OS privileges via vectors related to L3 recursive pagetables bsc995785 - CVE-2016-7093: Xe...

8.8CVSS7AI score0.00502EPSS
SaveExploits0References39
OpenVAS
OpenVAS
added 2016/10/12 12:00 a.m.57 views

openSUSE: Security Advisory for xen (openSUSE-SU-2016:2497-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.4AI score
SaveExploits0References1
OSV
OSV
added 2016/09/21 2:25 p.m.10 views

CVE-2016-7154

Use-after-free vulnerability in the FIFO event channel code in Xen 4.4.x allows local guest OS administrators to cause a denial of service host crash and possibly execute arbitrary code or obtain sensitive information via an invalid guest frame number...

6.7CVSS8.7AI score
SaveExploits0References8
CVE
CVE
added 2016/09/21 2:00 p.m.84 views

CVE-2016-7154

CVE-2016-7154 is a use-after-free in Xen’s FIFO event channel code affecting Xen 4.4.x. Verified connected documents show multiple advisories (SUSE/OpenSUSE) that fix this vulnerability in Xen by including CVE-2016-7154 among other related issues. Impact per the sources: local guest OS administra...

7.2CVSS7.1AI score0.00502EPSS
SaveExploits0References8Affected Software1
OpenVAS
OpenVAS
added 2016/09/19 12:00 a.m.50 views

Citrix XenServer Multiple Security Updates (CTX216071)

A number of security vulnerabilities have been identified in Citrix XenServer that may allow malicious privileged code running within a guest VM to compromise the host. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright...

8.2CVSS6.4AI score0.00502EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2016/09/12 12:00 a.m.39 views

Debian DSA-3663-1 : xen - security update

Multiple vulnerabilities have been discovered in the Xen hypervisor. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2016-7092 XSA-185 Jeremie Boutoille of Quarkslab and Shangcong Luan of Alibaba discovered a flaw in the handling of L3 pagetable entries,...

8.2CVSS7.1AI score0.00502EPSS
SaveExploits0References8
Debian
Debian
added 2016/09/09 5:39 a.m.42 views

[SECURITY] [DSA 3663-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3663-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 09, 2016 https://www.debian.org/security/faq -...

7.2CVSS0.5AI score0.00502EPSS
SaveExploits0
Debian
Debian
added 2016/09/09 5:39 a.m.62 views

[SECURITY] [DSA 3663-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3663-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 09, 2016 https://www.debian.org/security/faq -...

8.2CVSS7.8AI score0.00502EPSS
SaveExploits0
OSV
OSV
added 2016/09/09 12:00 a.m.44 views

DSA-3663-1 xen - security update

Bulletin has no description...

8.2CVSS6.1AI score0.00502EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2016/09/09 12:00 a.m.41 views

OracleVM 3.4 : xen (OVMSA-2016-0102)

The remote OracleVM system is missing necessary patches to address critical security updates : - BUILDINFO: commit=a83239e012959a65503ebb44ee9c54620a9d78f5 - evtchn-fifo: prevent use after free Boris Ostrovsky CVE-2016-7154 - x86/segment: Bounds check accesses to emulation ctxt-segreg Andrew Coop...

8.2CVSS6.8AI score0.00502EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2016/09/09 12:00 a.m.33 views

Debian Security Advisory DSA 3663-1 (xen - security update)

Multiple vulnerabilities have been discovered in the Xen hypervisor. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2016-7092 XSA-185 Jeremie Boutoille of Quarkslab and Shangcong Luan of Alibaba discovered a flaw in the handling of L3 pagetable entries,...

7.2CVSS0.2AI score0.00502EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2015/05/20 12:00 a.m.50 views

SUSE SLES11 Security Update : xen (SUSE-SU-2014:1732-1)

xen was updated to fix 10 security issues : - Guest effectable page reference leak in MMUMACHPHYSUPDATE handling CVE-2014-9030. - Insufficient bounding of 'REP MOVS' to MMIO emulated inside the hypervisor CVE-2014-8867. - Missing privilege level checks in x86 emulation of far branches...

7.1CVSS8.1AI score0.02221EPSS
SaveExploits0References29
Tenable Nessus
Tenable Nessus
added 2015/05/20 12:00 a.m.34 views

SUSE SLES11 Security Update : xen (SUSE-SU-2014:1710-1)

xen was updated to fix 14 security issues : - Guest effectable page reference leak in MMUMACHPHYSUPDATE handling CVE-2014-9030. - Insufficient bounding of 'REP MOVS' to MMIO emulated inside the hypervisor CVE-2014-8867. - Missing privilege level checks in x86 HLT, LGDT, LIDT, and LMSW emulation...

8.3CVSS8AI score0.02221EPSS
SaveExploits0References43
OpenVAS
OpenVAS
added 2015/03/22 12:00 a.m.40 views

Fedora Update for xen FEDORA-2015-3721

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.3CVSS6.8AI score0.02513EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2014/12/12 12:00 a.m.30 views

Fedora Update for xen FEDORA-2014-15995

Check the version of xen SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868572";...

8.3CVSS6.7AI score0.02221EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2014/12/02 12:00 a.m.60 views

Fedora Update for xen FEDORA-2014-15503

Check the version of xen SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.868524";...

8.3CVSS6.7AI score0.02221EPSS
SaveExploits1References2
Rows per page
Query Builder