Lucene search
+L

22 matches found

SUSE CVE
SUSE CVE
•added 2023/02/15 5:39 a.m.•13 views

SUSE CVE-2013-1964

Xen 4.0.x and 4.1.x incorrectly releases a grant reference when releasing a non-v1, non-transitive grant, which allows local guest administrators to cause a denial of service host crash, obtain sensitive information, or possibly have other impacts via unspecified vectors...

6.9CVSS6.7AI score0.00349EPSS
SaveExploits0References8
SUSE CVE
SUSE CVE
•added 2023/02/15 4:42 a.m.•11 views

SUSE CVE-2017-12135

Xen allows local OS guest users to cause a denial of service crash or possibly obtain sensitive information or gain privileges via vectors involving transitive grants...

7.3CVSS6.9AI score0.00452EPSS
SaveExploits0References14
Tenable Nessus
Tenable Nessus
•added 2022/10/26 12:00 a.m.•44 views

SUSE SLED15: xen / xen-devel / xen-doc-html / xen-libs / xen-libs-32bit / etc (SUSE-SU-2022:3727-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3727-1 advisory. Updated to version 4.16.2 bsc1027519: - CVE-2022-33746: Fixed DoS due to excessively long P2M po...

6.5CVSS6.5AI score0.00293EPSS
SaveExploits0References11
Prion
Prion
•added 2022/10/11 1:15 p.m.•38 views

Design/Logic Flaw

lock order inversion in transitive grant copy handling As part of XSA-226 a missing cleanup call was inserted on an error handling path. While doing so, locking requirements were not paid attention to. As a result two cooperating guests granting each other transitive grants can cause locks to be...

1CVSS5.5AI score0.00272EPSS
SaveExploits0References8Affected Software3
UbuntuCve
UbuntuCve
•added 2022/10/11 1:15 p.m.•62 views

CVE-2022-33748

lock order inversion in transitive grant copy handling As part of XSA-226 a missing cleanup call was inserted on an error handling path. While doing so, locking requirements were not paid attention to. As a result two cooperating guests granting each other transitive grants can cause locks to be...

5.6CVSS6.5AI score0.00272EPSS
SaveExploits0References5
OSV
OSV
•added 2022/10/11 1:15 p.m.•16 views

UBUNTU-CVE-2022-33748

lock order inversion in transitive grant copy handling As part of XSA-226 a missing cleanup call was inserted on an error handling path. While doing so, locking requirements were not paid attention to. As a result two cooperating guests granting each other transitive grants can cause locks to be...

5.6CVSS7.2AI score0.00272EPSS
SaveExploits0References6
Xen Project
Xen Project
•added 2022/10/11 12:00 p.m.•81 views

lock order inversion in transitive grant copy handling

ISSUE DESCRIPTION As part of XSA-226 a missing cleanup call was inserted on an error handling path. While doing so, locking requirements were not paid attention to. As a result two cooperating guests granting each other transitive grants can cause locks to be acquired nested within one another, b...

5.6CVSS0.8AI score0.00272EPSS
SaveExploits0Affected Software1
Tenable Nessus
Tenable Nessus
•added 2017/09/01 12:00 a.m.•62 views

OracleVM 3.2 : xen (OVMSA-2017-0149)

The remote OracleVM system is missing necessary patches to address critical security updates : - From e26560a4b056dad6d85ffd9ebfad9565f210a9cc Mon Sep 17 00:00:00 2001 From: Jan Beulich Date: Wed, 30 May 2012 09:22:17 +0100 Subject: PATCH gnttab: don't use domain lock for serialization Instead us...

8.8CVSS6.9AI score0.00452EPSS
SaveExploits0References4
Prion
Prion
•added 2017/08/24 2:29 p.m.•37 views

Information disclosure

Xen allows local OS guest users to cause a denial of service crash or possibly obtain sensitive information or gain privileges via vectors involving transitive grants...

4.6CVSS6.9AI score0.00452EPSS
SaveExploits0References10Affected Software2
OSV
OSV
•added 2017/08/24 2:29 p.m.•13 views

UBUNTU-CVE-2017-12135

Xen allows local OS guest users to cause a denial of service crash or possibly obtain sensitive information or gain privileges via vectors involving transitive grants...

8.8CVSS6.8AI score0.00452EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2017/08/24 2:29 p.m.•36 views

CVE-2017-12135

Xen allows local OS guest users to cause a denial of service crash or possibly obtain sensitive information or gain privileges via vectors involving transitive grants...

8.8CVSS6.8AI score0.00452EPSS
SaveExploits0References2
NVD
NVD
•added 2017/08/24 2:29 p.m.•36 views

CVE-2017-12135

Xen allows local OS guest users to cause a denial of service crash or possibly obtain sensitive information or gain privileges via vectors involving transitive grants...

8.8CVSS6.9AI score0.00452EPSS
SaveExploits0References10
OSV
OSV
•added 2017/08/24 2:29 p.m.•13 views

DEBIAN-CVE-2017-12135

Xen allows local OS guest users to cause a denial of service crash or possibly obtain sensitive information or gain privileges via vectors involving transitive grants...

8.8CVSS6.7AI score0.00452EPSS
SaveExploits0References1
OSV
OSV
•added 2017/08/24 2:29 p.m.•38 views

CVE-2017-12135

Xen allows local OS guest users to cause a denial of service crash or possibly obtain sensitive information or gain privileges via vectors involving transitive grants...

8.8CVSS9AI score
SaveExploits0References10
OSV
OSV
•added 2017/08/24 2:29 p.m.•11 views

ALPINE-CVE-2017-12135

Xen allows local OS guest users to cause a denial of service crash or possibly obtain sensitive information or gain privileges via vectors involving transitive grants...

8.8CVSS6.9AI score0.00452EPSS
SaveExploits0References1
CVE
CVE
•added 2017/08/24 2:00 p.m.•141 views

CVE-2017-12135

CVE-2017-12135 concerns the Xen hypervisor grant-table handling. The connected materials show that the vulnerability involves transitive grants and a path through grant-copy handling. The core issue is in the GNTTABOP_copy path, where the fix for CVE-2017-12135 could cause the caller to receive a...

8.8CVSS6.4AI score0.00452EPSS
SaveExploits0References10Affected Software1
Mend
Mend
•added 2017/08/24 2:00 p.m.•2 views

CVE-2017-12135

Xen allows local OS guest users to cause a denial of service crash or possibly obtain sensitive information or gain privileges via vectors involving transitive grants...

9.3CVSS0.00452EPSS
SaveExploits0References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/08/24 12:00 a.m.•4 views

CVE-2017-12135: Incorrect Calculation

Xen allows local OS guest users to cause a denial of service crash or possibly obtain sensitive information or gain privileges via vectors involving transitive grants...

8.8CVSS5.8AI score0.00452EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2017/08/24 12:00 a.m.•3 views

PT-2017-12357

Name of the Vulnerable Software and Affected Versions Xen affected versions not specified Description The issue allows local OS guest users to cause a denial of service, potentially obtain sensitive information, or gain privileges. This is achieved through vectors involving transitive grants...

8.8CVSS0.00452EPSS
SaveExploits0References158
RedhatCVE
RedhatCVE
•added 2017/08/15 4:19 p.m.•43 views

CVE-2017-12135

Xen allows local OS guest users to cause a denial of service crash or possibly obtain sensitive information or gain privileges via vectors involving transitive grants...

8.8CVSS5.6AI score0.00452EPSS
SaveExploits0References2
Rows per page
Query Builder