PT-2026-111646

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. 1 XSA-437 CVE-2023-34321 addressed issues with overflows in calculations involved in guests flushing caches through GNTTABOP cache flush. Unfortunately the fix there...

PT-2026-111644

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. 1 XSA-437 CVE-2023-34321 addressed issues with overflows in calculations involved in guests flushing caches through GNTTABOP cache flush. Unfortunately the fix there...

ALPINE-CVE-2020-11743

An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of service because of a bad error path in GNTTABOPmapgrant. Grant table operations are expected to return 0 for success, and a negative number for errors. Some misplaced brackets cause one error path to retur...

PT-2020-12820

Name of the Vulnerable Software and Affected Versions Xen versions prior to 4.14 Description An issue in Xen allows guest OS users to cause a denial of service due to bad continuation handling in GNTTABOP copy. Grant table operations are expected to return 0 for success and a negative number for...

PT-2020-6034

Name of the Vulnerable Software and Affected Versions Xen versions through 4.13.x Description The issue is related to errors in return values of the GNTTABOP map grant component in the Xen hypervisor. Exploitation of this issue can allow an attacker to cause a denial of service. The problem arise...

ALPINE-CVE-2017-8904

Xen through 4.8.x mishandles the "contains segment descriptors" property during GNTTABOPtransfer aka guest transfer operations, which might allow PV guest OS users to execute arbitrary code on the host OS, aka XSA-214...

UBUNTU-CVE-2017-8904

Xen through 4.8.x mishandles the "contains segment descriptors" property during GNTTABOPtransfer aka guest transfer operations, which might allow PV guest OS users to execute arbitrary code on the host OS, aka XSA-214...

PT-2017-18611

Name of the Vulnerable Software and Affected Versions Xen versions prior to 4.9 Description The issue is related to the mishandling of the "contains segment descriptors" property during GNTTABOP transfer operations. This might allow PV guest OS users to execute arbitrary code on the host OS...

Xen Hypervisor DoS

The vulnerability of the GNTTABOPswapgrantref function in Xen administrators’ scripts is related to pointer swapping errors. Exploiting this vulnerability could allow an attacker, operating locally, to cause a service failure by creating instances of the GNTTABOPsetuptable or GNTTABOPsetversion...

Xen GNTTABOP_swap_grant_ref() Version Check Denial of Service Vulnerability

Xen is a virtualization technology for the Linux kernel that allows multiple operating systems to run simultaneously. A security vulnerability in Xen GNTTABOPswapgrantref allows local users to exploit the vulnerability by triggering a null pointer reference that crashes the target HOST, due to a...

DSA-3286-1 xen - security update

Bulletin has no description...

PT-2015-1425

Name of the Vulnerable Software and Affected Versions Xen versions 4.2 through 4.5 Description The issue is related to the GNTTABOP swap grant ref function in Xen, which does not check the grant table operation version. This allows local guest domains to cause a denial of service via a hypercall...

PT-2014-5679

Name of the Vulnerable Software and Affected Versions Xen versions 4.4.x Description The issue arises from the alloc domain struct function in arch/arm/domain.c, which fails to properly initialize the structure containing the grant table pages for a domain when running on an ARM platform. This...

PT-2012-4780

Name of the Vulnerable Software and Affected Versions Xen versions 4.2 Citrix XenServer version 6.0.2 Description The issue allows local guest kernels or administrators to cause a denial of service, potentially leading to a host crash, and possibly gain privileges. This is achieved by crafting a...

PT-2012-5470

Name of the Vulnerable Software and Affected Versions Xen versions 4.0 through 4.2 Description The issue allows local guest OS administrators to cause a denial of service, resulting in an infinite loop and hang or crash, by providing invalid arguments to the GNTTABOP get status frames hypercall...