403 matches found
UBUNTU-CVE-2016-5412
arch/powerpc/kvm/book3shvrmhandlers.S in the Linux kernel through 4.7 on PowerPC platforms, when CONFIGKVMBOOK3S64HV is enabled, allows guest OS users to cause a denial of service host OS infinite loop by making a HCEDE hypercall during the existence of a suspended transaction...
CVE-2016-5412: Undefined Security Weakness
arch/powerpc/kvm/book3shvrmhandlers.S in the Linux kernel through 4.7 on PowerPC platforms, when CONFIGKVMBOOK3S64HV is enabled, allows guest OS users to cause a denial of service host OS infinite loop by making a HCEDE hypercall during the existence of a suspended transaction...
CVE-2016-5412
arch/powerpc/kvm/book3shvrmhandlers.S in the Linux kernel through 4.7 on PowerPC platforms, when CONFIGKVMBOOK3S64HV is enabled, allows guest OS users to cause a denial of service host OS infinite loop by making a HCEDE hypercall during the existence of a suspended transaction...
PT-2016-6414 · Linux +4 · Linux Kernel +4
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.8 Description: The issue allows guest OS users to cause a denial of service, resulting in a host OS infinite loop. This occurs when a H CEDE hypercall is made during the existence of a suspended transaction,...
Xen Hypervisor DoS
The vulnerability of the compatiret function in Xen supervisors is related to resource management errors. Exploiting this vulnerability can allow a malicious actor, operating locally, to trigger a service failure by calling the hypercalliret function with the EFLAGS.VM parameter set...
PT-2016-4864
Name of the Vulnerable Software and Affected Versions Xen versions 3.4.0 through 3.4.1 Xen versions 4.1.x through 4.6.x Description The issue allows local PV guests to obtain sensitive information, cause a denial of service, gain privileges, or have unspecified other impact. This is achieved via ...
CVE-2016-1570: Improper Input Validation
The PV superpage functionality in arch/x86/mm.c in Xen 3.4.0, 3.4.1, and 4.1.x through 4.6.x allows local PV guests to obtain sensitive information, cause a denial of service, gain privileges, or have unspecified other impact via a crafted page identifier MFN to the 1 MMUEXTMARKSUPER or 2...
xen-kernel -- PV superpage functionality missing sanity checks
The Xen Project reports: The PV superpage functionality lacks certain validity checks on data being passed to the hypervisor by guests. This is the case for the page identifier MFN passed to MMUEXTMARKSUPER and MMUEXTUNMARKSUPER sub-ops of the HYPERVISORmmuextop hypercall as well as for various...
PT-2015-2908
Name of the Vulnerable Software and Affected Versions Xen versions 4.6.x and earlier Description The issue is related to the improper enforcement of limits on page order inputs for certain suboperations, including XENMEM increase reservation, XENMEM populate physmap, and XENMEM exchange, within t...
Citrix XenServer Multiple memory_exchange() Hypercall Error Handling DoS (CTX203451)
The version of Citrix XenServer running on the remote host is affected by multiple denial of service vulnerabilities due to multiple flaws in the memoryexchange function in memory.c that are triggered when handling hypercall XENMEMexchange errors. A local attacker within a guest can exploit these...
CVE-2015-7812
The hypercallcreatecontinuation function in arch/arm/domain.c in Xen 4.4.x through 4.6.x allows local guest users to cause a denial of service host crash via a preemptible hypercall to the multicall interface...
CVE-2015-7812
The hypercallcreatecontinuation function in arch/arm/domain.c in Xen 4.4.x through 4.6.x allows local guest users to cause a denial of service host crash via a preemptible hypercall to the multicall interface...
UBUNTU-CVE-2015-7812
The hypercallcreatecontinuation function in arch/arm/domain.c in Xen 4.4.x through 4.6.x allows local guest users to cause a denial of service host crash via a preemptible hypercall to the multicall interface...
CVE-2015-7812
CVE-2015-7812 : In Xen, the hypercall_create_continuation function in arch/arm/domain.c is vulnerable within Xen 4.4.x through 4.6.x. A local guest user can issue a preemptible hypercall to the multicall interface, which may crash the host. The description specifies a local attack that leads to a...
CVE-2015-7812
The hypercallcreatecontinuation function in arch/arm/domain.c in Xen 4.4.x through 4.6.x allows local guest users to cause a denial of service host crash via a preemptible hypercall to the multicall interface...
PT-2015-2746
Name of the Vulnerable Software and Affected Versions Xen versions 4.4.x through 4.6.x Description The issue is related to the hypercall create continuation function in arch/arm/domain.c, which allows local guest users to cause a denial of service host crash via a preemptible hypercall to the...
Xen Denial of Service Vulnerability (CNVD-2015-07244)
Xen is an open source virtual machine monitor product developed at the University of Cambridge in the United Kingdom. A security vulnerability exists in Xen versions 3.2.x through 4.6.x due to the failure of the program to limit the number of printk console messages when logging HYPERCALLxenoprof...
CVE-2015-7971
Xen 3.2.x through 4.6.x does not limit the number of printk console messages when logging certain pmu and profiling hypercalls, which allows local guests to cause a denial of service via a sequence of crafted 1 HYPERCALLxenoprofop hypercalls, which are not properly handled in the doxenoprofop...
CVE-2015-7969
Multiple memory leaks in Xen 4.0 through 4.6.x allow local guest administrators or domains with certain permission to cause a denial of service memory consumption via a large number of "teardowns" of domains with the vcpu pointer array allocated using the 1 XENDOMCTLmaxvcpus hypercall or the...
CVE-2015-7969
Multiple memory leaks in Xen 4.0 through 4.6.x allow local guest administrators or domains with certain permission to cause a denial of service memory consumption via a large number of "teardowns" of domains with the vcpu pointer array allocated using the 1 XENDOMCTLmaxvcpus hypercall or the...