1391 matches found
DEBIAN-CVE-2017-14318
An issue was discovered in Xen 4.5.x through 4.9.x. The function gnttabcacheflush handles GNTTABOPcacheflush grant table operations. It checks to see if the calling domain is the owner of the page that is to be operated on. If it is not, the owner's grant table is checked to see if a grant mappin...
ALPINE-CVE-2017-14316
A parameter verification issue was discovered in Xen through 4.9.x. The function allocheappages allows callers to specify the first NUMA node that should be used for allocations through the memflags parameter; the node is extracted using the MEMFgetnode macro. While the function checks to see if...
[SECURITY] Fedora 27 Update: xen-4.9.0-9.fc27
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...
[SECURITY] Fedora 26 Update: xen-4.8.1-8.fc26
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...
Xen Hypervisor Function Error Condition Handling Lock Release Failure Guest-to-Host DoS (XSA-235)
According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by flaw in the xenmemaddtophysmapone function in arch/arm/mm.c that is triggered as the application fails to release a lock when handling certain error conditions. This may allow a privilege...
[SECURITY] Fedora 26 Update: xen-4.8.1-7.fc26
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...
Xen memory corruption vulnerability (CNVD-2017-28619)
Xen is an open source virtual machine monitor product developed at the University of Cambridge in the United Kingdom. Xen suffers from a memory corruption vulnerability that allows an attacker to exploit the vulnerability to submit a specially crafted request to obtain sensitive information or...
The vulnerability of the grant-table component in the Xen hypervisor allows a perpetrator to obtain confidential information or enhance their privileges.
The vulnerability of the grant-table component in the Xen hypervisor is related to incorrect handling of information regarding certain simultaneous unmap calls. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain confidential information or enhance their...
The vulnerability of Xen hypervisors allows a perpetrator to obtain confidential information or cause service failures.
The vulnerability of Xen hypervisors is related to insufficient checking of the ports accessed by the attackers. Exploiting this vulnerability can allow a remote attacker to cause service failures or obtain confidential information such as changing the zero pointer...
The vulnerability of Xen hypervisors allows a attacker to gain privileged access to the host.
The vulnerability of Xen hypervisors is related to improper page transfer. Exploiting this vulnerability can allow a remote attacker to gain privileged access to the host from the host operating system...
The vulnerability of the grant-table component in the Xen hypervisor allows a attacker to trigger a service failure or gain privileged access to the host.
The vulnerability of the grant-table component in the Xen hypervisor is related to deficiencies in access control for GNTMAPdevicemap and GNTMAPhostmap. Exploiting this vulnerability could allow a malicious actor to trigger a service failure memory corruption or gain privileged access to the host...
The vulnerability of Xen hypervisors allows a malicious actor to gain privileged access to the host.
The vulnerability of Xen hypervisors is related to insufficient checking of memory distribution during P2M operations. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain privileged access to the host from the guest operating system...
The vulnerability of Xen hypervisors allows a attacker to trigger a service failure or gain privileged access to the host.
The vulnerability of Xen hypervisors is related to deficiencies in access control for GNTMAPdevicemap and GNTMAPhostmap provided that GNTMAPhostmap is in the unmapping mode. Exploiting this vulnerability can allow a malicious actor to cause a service failure memory corruption or gain privileged...
[SECURITY] Fedora 25 Update: xen-4.7.2-7.fc25
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...
[SECURITY] Fedora 26 Update: xen-4.8.1-4.fc26
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...
The vulnerability of the Xen hypervisor, a platform for server virtualization called XenServer, allows a attacker to cause a service failure, obtain confidential information, or execute arbitrary code.
The vulnerability of the Xen hypervisor and the XenServer platform for server virtualization exists due to insufficient validation of input data. Exploiting this vulnerability can allow a guest user of the 86-bit operating system running locally to obtain confidential information, execute arbitra...
DEBIAN-CVE-2017-10918
Xen through 4.8.x does not validate memory allocations during certain P2M operations, which allows guest OS users to obtain privileged host OS access, aka XSA-222...
ALPINE-CVE-2017-10922
The grant-table feature in Xen through 4.8.x mishandles MMIO region grant references, which allows guest OS users to cause a denial of service loss of grant trackability, aka XSA-224 bug 3...