CVE-2013-2212

The vmxsetucmode function in Xen 3.3 through 4.3, when disabling caches, allows local HVM guests with access to memory mapped I/O regions to cause a denial of service CPU consumption and possibly hypervisor or guest kernel panic via a crafted GFN range...

PT-2013-3601

Name of the Vulnerable Software and Affected Versions Xen versions 3.3 through 4.3 Description The issue allows local HVM guests with access to memory mapped I/O regions to cause a denial of service. This can result in CPU consumption and possibly hypervisor or guest kernel panic via a crafted GF...

CVE-2012-5525

The getpagefromgfn hypercall function in Xen 4.2 allows local PV guest OS administrators to cause a denial of service crash via a crafted GFN that triggers a buffer over-read...

PT-2012-6004

Name of the Vulnerable Software and Affected Versions Xen version 4.2 Description The issue allows local PV guest OS administrators to cause a denial of service crash by exploiting the get page from gfn hypercall function. This is achieved via a crafted GFN that triggers a buffer over-read...

Broken error handling in guest_physmap_mark_populate_on_demand()

ISSUE DESCRIPTION guestphysmapmarkpopulateondemand, before carrying out its actual operation, checks that the subject GFNs are not in use. If that check fails, the code prints a message and bypasses the gfnunlock matching the gfnlock carried out before entering the loop. Further, the function is...