1407 matches found
PT-2022-3491 · Linux +7 · Linux Kernel +7
Name of the Vulnerable Software and Affected Versions: Xen hypervisor affected versions not specified Linux kernel affected versions not specified Description: The issue is related to a disclosure of information in the Xen hypervisor and Linux kernel. It may allow a remote attacker to gain...
GSD-2022-1002605 xen: unexport __init-annotated xen_xlate_map_ballooned_pages()
xen: unexport init-annotated xenxlatemapballoonedpages This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.4 by commit...
[SECURITY] Fedora 36 Update: xen-4.16.1-2.fc36
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...
Vulnerabilities fixed in Xen
Vulnerabilities have been fixed in the Xen hypervisor. The vulnerabilities allow a malicious person with access to a guest system to obtain elevated privileges on the host and can thereby compromise the system. Xen has released updates to fix the vulnerabilities. More information can be found on...
ALPINE-CVE-2022-26362
x86 pv: Race condition in typeref acquisition Xen maintains a type reference count for pages, in addition to a regular reference count. This scheme is used to maintain invariants required for Xen's safety, e.g. PV guests may not have direct writeable access to pagetables; updates need auditing by...
UBUNTU-CVE-2022-26364
x86 pv: Insufficient care with non-coherent mappings This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Xen maintains a type reference count for pages, in addition to a regular reference count. This scheme is used to...
[SECURITY] Fedora 36 Update: xen-4.16.1-1.fc36
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...
[SECURITY] Fedora 34 Update: xen-4.14.5-1.fc34
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...
[SECURITY] Fedora 35 Update: xen-4.15.2-3.fc35
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...
No memory limit for dom0less domUs (XSA-383)
The dom0less feature allows an administrator to create multiple unprivileged domains directly from Xen. Unfortunately, the memory limit from them is not set. This allows a domain to allocate memory beyond what an administrator originally configured. Note that Nessus has not tested for this issue...
The vulnerability of Xen hypervisors, related to the use of memory after it is freed, allows attackers to obtain confidential information, increase their privileges, or cause the application to terminate abnormally.
The vulnerability of Xen hypervisors is related to the use of memory after it has been freed. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...
The vulnerability of Xen hypervisors relates to the insecure management of privileges, which allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of Xen hypervisors is related to insecure management of privileges. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...
The vulnerability of the dom0less Xen hypervisor function, allowing a attacker to trigger a service failure
The vulnerability of the dom0less Xen hypervisor relates to the provision of unlimited memory. Exploiting this vulnerability allows a remote attacker to cause a service failure...
Vulnerabilities fixed in Xen
Vulnerabilities have been fixed in Xen Hypervisor. The vulnerabilities allow a malicious party to carry out attacks execute attacks that potentially lead to the following categories of damage: Denial-of-Service DoS. Obtaining elevated privileges Accessing sensitive data Xen has published mitigati...
The vulnerability of Xen hypervisors relates to the execution of a loop with an unavailable exit condition, allowing a malicious actor to cause a service failure.
The vulnerability of Xen hypervisors relates to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability allows an attacker to cause a service failure...
The vulnerability of Xen hypervisors, related to uncontrolled resource consumption, allows a hacker to cause a service failure.
The vulnerability of Xen hypervisors is related to an uncontrolled consumption of resources. Exploiting this vulnerability allows a attacker to cause service failures...
The vulnerability of Xen hypervisors, related to deficiencies in access control, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of Xen hypervisors is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...
UBUNTU-CVE-2022-26356
Racy interactions between dirty vram tracking and paging log dirty hypercalls Activation of log dirty mode done by XENDMOPtrackdirtyvram was named HVMOPtrackdirtyvram before Xen 4.9 is racy with ongoing log dirty hypercalls. A suitably timed call to XENDMOPtrackdirtyvram can enable log dirty whil...
CVE-2022-26357
race in VT-d domain ID cleanup Xen domain IDs are up to 15 bits wide. VT-d hardware may allow for only less than 15 bits to hold a domain ID associating a physical device with a particular domain. Therefore internally Xen domain IDs are mapped to the smaller value range. The cleaning up of the...