1391 matches found
Xen Scrubbed Pages Cache Information Disclosure (XSA-364)
According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by an information disclosure vulnerability. On Arm, a guest is allowed to control whether memory access bypass the cache. This means that Xen needs to ensure that all writes such as the ones...
UBUNTU-CVE-2021-27379
An issue was discovered in Xen through 4.11.x, allowing x86 Intel HVM guest OS users to achieve unintended read/write DMA access, and possibly cause a denial of service host OS crash or gain privileges. This occurs because a backport missed a flush, and thus IOMMU updates were not always correct...
Vulnerability fixed in Xen
The developers of the Xen hypervisor have fixed a vulnerability fixed. A local malicious party within a guest system could potentially exploit the vulnerability potentially exploit it to cause a denial-of-service cause on the host or to obtain elevated privileges. Versions of Xen equal to or high...
DEBIAN-CVE-2021-26934
An issue was discovered in the Linux kernel 4.18 through 5.10.16, as used by Xen. The backend allocation aka be-alloc mode of the drmxenfront drivers was not meant to be a supported configuration, but this wasn't stated accordingly in its support status entry...
CVE-2021-26933
An issue was discovered in Xen 4.9 through 4.14.x. On Arm, a guest is allowed to control whether memory accesses are bypassing the cache. This means that Xen needs to ensure that all writes such as the ones during scrubbing have reached the memory before handing over the page to a guest...
[SECURITY] Fedora 32 Update: xen-4.13.2-6.fc32
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...
Xen OOM DoS (XSA-349)
According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by a denial of service vulnerability due to an issue with the watch event queue. A malicious guest can exploit this, by abusing the unbounded queue, to cause an out-of-memory error in the...
UBUNTU-CVE-2021-3308
An issue was discovered in Xen 4.12.3 through 4.12.4 and 4.13.1 through 4.14.x. An x86 HVM guest with PCI pass through devices can force the allocation of all IDT vectors on the system by rebooting itself with MSI or MSI-X capabilities enabled and entries setup. Such reboots will leak any vectors...
[SECURITY] Fedora 33 Update: xen-4.14.1-2.fc33
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...
Xen mishandling of the event channel validity constraint DoS (XSA-338))
A denial of service DoS vulnerability exists in Xen due to a mishandling of the constraint that once-valid event channels may not turn invalid. An unprivileged guest may be able to crash Xen, leading to a denial of service for the entire system. Note that Nessus has not tested for this issue but...
Xen missing error handling in MSR_MISC_ENABLE DoS (XSA-333)
A denial of service DoS vulnerability exists in Xen server due to missing error handling in MISCENABLE MSR. A malicious PV guest administrator can trigger Xen to crash, resulting in a host DoS. Note that Nessus has not tested for this issue but has instead relied only on the application's...
Xen Missing memory barriers DoS (XSA-340)
A denial of service DoS vulnerability exists in Xen servers when accessing/allocating an event channel due to a missing memory barrier. An authenticated, local attacker may be able to cause a hypervisor crash resulting in a Denial of Service DoS. Note that Nessus has not tested for this issue but...
XENMEM_aquire_resources Error Path DoS (XSA-334)
A denial of service DoS vulnerability exists in Xen servers XENMEMacquireresource due to an error path exiting without releasing an RCU Read, Copy, Update reference. An authenticated, local attacker can exploit this issue, via a malicious HVM stubdomain which can cause an RCU reference to be...
Xen Control Block DoS (XSA-358)
According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by a denial of service vulnerability. Recording of the per-vCPU control block mapping maintained by Xen and that of pointers into the control block is reversed. The consumer assumes, seeing...
Xen xenstore watch notification Information Disclosure (XSA-115)
"According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by an information disclosure vulnerability due to a lack of permission checks for xenstore watch event reporting. A guest administrator can watch the root xenstored node, which will cause...
Xen Management Tool DoS (XSA-323)
According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by a denial of service vulnerability due to a bad path name limit in oxenstored. A malicious guest administrator can exploit this, by creating paths in the guest's own namespace that are too...
PT-2021-7286 · Unknown +4 · Xen Hypervisor +4
Name of the Vulnerable Software and Affected Versions: Xen hypervisor netfront component affected versions not specified Description: The issue is related to errors in resource release in the netfront component of the Xen hypervisor. Exploitation of this issue may allow an attacker to cause a...
PT-2021-7293 · Xen +4 · Xen +4
Name of the Vulnerable Software and Affected Versions: Xen affected versions not specified Description: The issue is related to a component of the Xen hypervisor, specifically the blkfront component, which has a resource release error. This can be exploited by a remote attacker to cause a denial ...
Xen Memory Leak DoS (XSA-330)
According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by a denial of service vulnerability due to a memory leak in XSRESETWATCHES. A guest can cause unbounded memory usage in oxenstored to cause the system to stop responding with a system-wide...