The vulnerability of Xen cross-platform hypervisors, related to information disclosure, allows attackers to gain access to confidential data.

The vulnerability of the cross-platform Xen hypervisor is related to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data...

The vulnerability of Xen cross-platform hypervisors relates to insecure management of privileges, allowing attackers to access confidential data and cause service failures.

The vulnerability of the cross-platform Xen hypervisor is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to access confidential data and also cause service failures...

The vulnerability of Xen hypervisors on x86 Intel systems, related to the lack of a mechanism for managing privileges, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of Xen hypervisors on x86 Intel systems is related to the lack of a mechanism for managing privileges. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and even cause service failures...

The vulnerability of Xen hypervisors that run on multiple platforms, related to deficiencies in access control to ports, allows attackers to gain access to confidential data.

The vulnerability of the cross-platform hypervisor Xen is related to deficiencies in access control for ports. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

The vulnerability of the cross-platform hypervisor Xen, related to the disclosure of information through incompatibilities, allows attackers to gain access to confidential data.

The vulnerability of the cross-platform hypervisor Xen is related to the exposure of information through incompatibility. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

CVE-2021-28711

Rogue backends can cause DoS of guests via high frequency events This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. Xen offers the ability to run PV backends in regular unprivileged guests, typically referred to as "drive...

CVE-2021-28713

A denial of service flaw for virtual machine guests in the Linux kernel's Xen hypervisor subsystem was found in the way users call some interrupts with high frequency from one of the guests. A local user could use this flaw to starve the resources resulting in a denial of service. Mitigation...

CVE-2021-28711

A denial of service flaw for virtual machine guests in the Linux kernel's Xen hypervisor subsystem was found in the way users call some interrupts with high frequency from one of the guests. A local user could use this flaw to starve the resources resulting in a denial of service. Mitigation...

GSD-2021-1002685 xen/netfront: harden netfront against event channel storms

xen/netfront: harden netfront against event channel storms This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.168 by commit...

GSD-2021-1002662 xen/blkfront: harden blkfront against event channel storms

xen/blkfront: harden blkfront against event channel storms This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.222 by commit...

[SECURITY] Fedora 34 Update: xen-4.14.3-3.fc34

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

ALPINE-CVE-2021-28703

grant table v2 status pages may remain accessible after de-allocation take two Guest get permitted access to certain Xen-owned pages of memory. The majority of such pages remain allocated / associated with a guest for its entire lifetime. Grant table v2 status pages, however, get de-allocated whe...

The vulnerability of the implementation of Intel Virtualization Technology for Directed I/O (VT-d) in Xen hypervisors on Intel x86-based computers allows a hacker to enhance their privileges.

The vulnerability of the Intel Virtualization Technology for Directed I/O VT-d implementation in Xen hypervisors on Intel x86-based computers is related to incorrect processing of the address translation table. Exploiting this vulnerability can allow attackers to enhance their privileges...

openSUSE 15 Security Update : xen (openSUSE-SU-2021:1543-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1543-1 advisory. - PCI devices with RMRRs not deassigned correctly Certain PCI devices in a system might be assigned Reserved Memory Regions specified via...

[SECURITY] [DSA 5017-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5017-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 05, 2021 https://www.debian.org/security/faq -...

[SECURITY] Fedora 35 Update: xen-4.15.1-4.fc35

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

CVE-2021-28707

PoD operations on misaligned GFNs This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. x86 HVM and PVH guests may be started in populate-on-demand PoD mode, to provide a way for them to later easily have more memory assigne...

Xen 命令注入漏洞

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports migration at runtime to ensure uptime and avoid downtime. A command injection vulnerability exists ...

Xen 命令注入漏洞

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports migration at runtime to ensure uptime and avoid downtime. A command injection vulnerability exists ...

Xen 命令注入漏洞

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports migration at runtime to ensure uptime and avoid downtime. A command injection vulnerability exists ...