ALPINE-CVE-2021-28703

grant table v2 status pages may remain accessible after de-allocation take two Guest get permitted access to certain Xen-owned pages of memory. The majority of such pages remain allocated / associated with a guest for its entire lifetime. Grant table v2 status pages, however, get de-allocated whe...

openSUSE 15 Security Update : xen (openSUSE-SU-2021:1543-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1543-1 advisory. - PCI devices with RMRRs not deassigned correctly Certain PCI devices in a system might be assigned Reserved Memory Regions specified via...

The vulnerability of the implementation of Intel Virtualization Technology for Directed I/O (VT-d) in Xen hypervisors on Intel x86-based computers allows a hacker to enhance their privileges.

The vulnerability of the Intel Virtualization Technology for Directed I/O VT-d implementation in Xen hypervisors on Intel x86-based computers is related to incorrect processing of the address translation table. Exploiting this vulnerability can allow attackers to enhance their privileges...

[SECURITY] [DSA 5017-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5017-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 05, 2021 https://www.debian.org/security/faq -...

[SECURITY] Fedora 35 Update: xen-4.15.1-4.fc35

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

CVE-2021-28707

PoD operations on misaligned GFNs This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. x86 HVM and PVH guests may be started in populate-on-demand PoD mode, to provide a way for them to later easily have more memory assigne...

Xen 命令注入漏洞

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports migration at runtime to ensure uptime and avoid downtime. A command injection vulnerability exists ...

Xen 命令注入漏洞

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports migration at runtime to ensure uptime and avoid downtime. A command injection vulnerability exists ...

Xen 命令注入漏洞

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports migration at runtime to ensure uptime and avoid downtime. A command injection vulnerability exists ...

ALPINE-CVE-2021-28710

certain VT-d IOMMUs may not work in shared page table mode For efficiency reasons, address translation control structures page tables may and, on suitable hardware, by default will be shared between CPUs, for second-level translation EPT, and IOMMUs. These page tables are presently set up to alwa...

Xen 权限许可和访问控制问题漏洞

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. Xen suffers from a permissions licensing and...

PT-2021-5059 · Xen · Xen

Name of the Vulnerable Software and Affected Versions: Xen affected versions not specified Description: The issue is related to the implementation of Intel Virtualization Technology for Directed I/O VT-d in the Xen hypervisor on Intel x86 architecture computers. It involves incorrect handling of...

Xen / TSX Async Abort protections not restored after S3 (XSA-377)

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by a vulnerability as x86: TSX Async Abort protections not restored after S3. This issue relates to the TSX Async Abort speculative security vulnerability. Please see...

GSD-2021-1001676 xen/x86: fix PV trap handling on secondary processors

xen/x86: fix PV trap handling on secondary processors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.70 by commit...

[SECURITY] Fedora 34 Update: xen-4.14.3-2.fc34

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

[SECURITY] Fedora 33 Update: xen-4.14.3-2.fc33

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

The vulnerability of the cross-platform hypervisor Xen kernel in the Linux operating system, related to uncontrolled resource consumption, allows a perpetrator to trigger a service failure for dom0 or domain drivers.

The vulnerability of the cross-platform hypervisor Xen in the Linux operating system is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow an attacker to cause a failure in the dom0 service or the domain driver...

[SECURITY] Fedora 35 Update: xen-4.15.0-7.fc35

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

[SECURITY] Fedora 35 Update: xen-4.15.0-6.fc35

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

The vulnerability of the libxl__domain_suspend_state structure in Xen hypervisors lies in the lack of resource initialization, which allows attackers to trigger a service failure.

The vulnerability of the libxldomainsuspendstate structure in Xen hypervisors stems from the fact that this structure does not utilize the standard initialization and deallocation mechanism. Exploiting this vulnerability could allow an attacker to cause a service failure...