Lucene search
+L

2731 matches found

OSV
OSV
•added 2020/12/15 5:15 p.m.•29 views

CVE-2020-29567

An issue was discovered in Xen 4.14.x. When moving IRQs between CPUs to distribute the load of IRQ handling, IRQ vectors are dynamically allocated and de-allocated on the relevant CPUs. De-allocation has to happen when certain constraints are met. If these conditions are not met when first checke...

6.2CVSS6.4AI score
SaveExploits0References3
OSV
OSV
•added 2020/12/15 5:15 p.m.•7 views

DEBIAN-CVE-2020-29567

An issue was discovered in Xen 4.14.x. When moving IRQs between CPUs to distribute the load of IRQ handling, IRQ vectors are dynamically allocated and de-allocated on the relevant CPUs. De-allocation has to happen when certain constraints are met. If these conditions are not met when first checke...

6.2CVSS7.5AI score0.00368EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
•added 2020/12/15 5:15 p.m.•99 views

CVE-2020-29567

An issue was discovered in Xen 4.14.x. When moving IRQs between CPUs to distribute the load of IRQ handling, IRQ vectors are dynamically allocated and de-allocated on the relevant CPUs. De-allocation has to happen when certain constraints are met. If these conditions are not met when first checke...

6.2CVSS2AI score0.00368EPSS
SaveExploits0
UbuntuCve
UbuntuCve
•added 2020/12/15 5:15 p.m.•39 views

CVE-2020-29567

An issue was discovered in Xen 4.14.x. When moving IRQs between CPUs to distribute the load of IRQ handling, IRQ vectors are dynamically allocated and de-allocated on the relevant CPUs. De-allocation has to happen when certain constraints are met. If these conditions are not met when first checke...

6.2CVSS6.9AI score0.00368EPSS
SaveExploits0References3
Mend
Mend
•added 2020/12/15 4:50 p.m.•2 views

CVE-2020-29567

An issue was discovered in Xen 4.14.x. When moving IRQs between CPUs to distribute the load of IRQ handling, IRQ vectors are dynamically allocated and de-allocated on the relevant CPUs. De-allocation has to happen when certain constraints are met. If these conditions are not met when first checke...

6.9CVSS0.00368EPSS
SaveExploits0References7
CVE
CVE
•added 2020/12/15 4:50 p.m.•114 views

CVE-2020-29567

CVE-2020-29567 affects Xen 4.14.x. When moving IRQs between CPUs, certain IRQ vector de-allocations may cause a CPU to self-interrupt, potentially causing a host DoS. A domain with a passed-through PCI device can trigger the issue; only x86 is vulnerable (Arm is not). Public details indicate reme...

6.2CVSS6.1AI score0.00368EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
•added 2020/12/15 4:50 p.m.•67 views

CVE-2020-29567

An issue was discovered in Xen 4.14.x. When moving IRQs between CPUs to distribute the load of IRQ handling, IRQ vectors are dynamically allocated and de-allocated on the relevant CPUs. De-allocation has to happen when certain constraints are met. If these conditions are not met when first checke...

6.2CVSS6.4AI score0.00368EPSS
SaveExploits0
Xen Project
Xen Project
•added 2020/12/15 12:00 p.m.•74 views

infinite loop when cleaning up IRQ vectors

ISSUE DESCRIPTION When moving IRQs between CPUs to distribute the load of IRQ handling, IRQ vectors are dynamically allocated and de-allocated on the relevant CPUs. De-allocation has to happen when certain constraints are met. If these conditions are not met when first checked, the checking CPU m...

6.2CVSS2.2AI score0.00368EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
•added 2020/12/15 12:00 a.m.•22 views

Xen Security Vulnerabilities

Xen is a product of the University of Cambridge UK.Xen is an open source virtual machine monitor product.Service is a computer monitoring and classroom management software for Windows and Linux.effect is a product of the University of Cambridge UK.effect is a software package for adding image...

6.2CVSS6.9AI score0.00368EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/15 12:00 a.m.•3 views

CVE-2020-29567: Allocation of Resources Without Limits or Throttling

An issue was discovered in Xen 4.14.x. When moving IRQs between CPUs to distribute the load of IRQ handling, IRQ vectors are dynamically allocated and de-allocated on the relevant CPUs. De-allocation has to happen when certain constraints are met. If these conditions are not met when first checke...

6.2CVSS5.8AI score0.00368EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/12/15 12:00 a.m.•1 views

PT-2020-17193

Name of the Vulnerable Software and Affected Versions Xen versions 4.14.x Description An issue was discovered in Xen when moving IRQs between CPUs to distribute the load of IRQ handling. IRQ vectors are dynamically allocated and de-allocated on the relevant CPUs. De-allocation has to happen when...

6.2CVSS0.00444EPSS
SaveExploits0References107
RedhatCVE
RedhatCVE
•added 2020/10/16 6:30 a.m.•50 views

CVE-2020-27152

A stack overflow flaw via an infinite loop condition issue was found in the KVM hypervisor of the Linux kernel. This flaw occurs while processing interrupts because the IRQ state is erroneously set. This flaw allows a guest user to crash the host kernel, resulting in a denial of service. The...

2.1CVSS2.1AI score0.00569EPSS
SaveExploits1References6
Oracle linux
Oracle linux
•added 2020/10/12 12:00 a.m.•98 views

Unbreakable Enterprise kernel security update

4.14.35-2025.401.4 - KVM: x86: always expose VIRTSSBD to guests Paolo Bonzini Orabug: 31957046 4.14.35-2025.401.3 - iommu/amd: Restore IRTE.RemapEn bit after programming IRTE Suravee Suthikulpanit Orabug: 31931371 - oracleasm: Access dbdev before dropping inode Stephen Brennan Orabug: 31901948 -...

7.8CVSS6.5AI score0.05271EPSS
SaveExploits4
OSV
OSV
•added 2020/10/06 3:15 p.m.•4 views

DEBIAN-CVE-2020-25742

pcichangeirqlevel in hw/pci/pci.c in QEMU before 5.1.1 has a NULL pointer dereference because pcigetbus might not return a valid pointer...

3.2CVSS5.2AI score0.00467EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2020/10/06 12:00 a.m.•3 views

PT-2020-5260

Name of the Vulnerable Software and Affected Versions QEMU versions prior to 5.1.1 Description The issue is related to a NULL pointer dereference in the pci change irq level function in hw/pci/pci.c. This occurs because pci get bus might not return a valid pointer, potentially allowing an attacke...

3.2CVSS0.00467EPSS
SaveExploits0References15
OSV
OSV
•added 2018/09/22 7:23 p.m.•14 views

MGASA-2018-0391 Updated kernel packages fix security vulnerabilities

This kernel update is based on the upstream 4.14.70 and adds additional fixes for the L1TF security issues. It also fixes at least the following security issues: Linux kernel from versions 3.9 and up, is vulnerable to a denial of service attack with low rates of specially modified packets targeti...

7.8CVSS6.8AI score0.32445EPSS
SaveExploits6References3
Oracle linux
Oracle linux
•added 2018/08/16 12:00 a.m.•90 views

Unbreakable Enterprise kernel security update

4.1.12-124.18.6 - qla2xxx: Update the version to 9.00.00.00.41.0-k1. Giridhar Malavali Orabug: 28172611 - qla2xxx: Utilize complete local DMA buffer for DIF PI inforamtion. Giridhar Malavali Orabug: 28172611 - qla2xxx: Correction to total data segment count when local DMA buffers used for DIF PI...

7.8CVSS0.1AI score0.00473EPSS
SaveExploits0
RedHat Linux
RedHat Linux
•added 2018/04/10 3:34 a.m.•13 views

kernel: Buffer overflow in mp_override_legacy_irq()

Buffer overflow in the mpoverridelegacyirq function in arch/x86/kernel/acpi/boot.c in the Linux kernel through 4.12.2 allows local users to gain privileges via a crafted ACPI table...

7.8CVSS7.2AI score0.00412EPSS
SaveExploits0References4
Oracle linux
Oracle linux
•added 2017/11/30 12:00 a.m.•168 views

kernel security and bug fix update

3.10.0-693.11.1.OL7 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey bug 24817676 3.10.0-693.11.1 - powerpc perf: Fix book3s kernel to userspace backtraces Gustavo...

5.5CVSS0.3AI score0.00721EPSS
SaveExploits0
OSV
OSV
•added 2017/09/26 5:29 a.m.•10 views

CVE-2017-1000252

The KVM subsystem in the Linux kernel through 4.13.3 allows guest OS users to cause a denial of service assertion failure, and hypervisor hang or crash via an out-of bounds guestirq value, related to arch/x86/kvm/vmx.c and virt/kvm/eventfd.c...

5.5CVSS6.5AI score
SaveExploits0References13
Rows per page
Query Builder