CVE-2021-28708

PoD operations on misaligned GFNs This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. x86 HVM and PVH guests may be started in populate-on-demand PoD mode, to provide a way for them to later easily have more memory assigne...

CVE-2021-28704

PoD operations on misaligned GFNs This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. x86 HVM and PVH guests may be started in populate-on-demand PoD mode, to provide a way for them to later easily have more memory assigne...

EUVD-2012-5405

Malware in sbrugna...

EUVD-2012-3452

Malware in sbrugna...

SUSE CVE-2020-25598

An issue was discovered in Xen 4.14.x. There is a missing unlock in the XENMEMacquireresource error path. The RCU Read, Copy, Update mechanism is a synchronisation primitive. A buggy error path in the XENMEMacquireresource exits without releasing an RCU reference, which is conceptually similar to...

SUSE CVE-2021-28704

PoD operations on misaligned GFNs This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. x86 HVM and PVH guests may be started in populate-on-demand PoD mode, to provide a way for them to later easily have more memory assigne...

SUSE SLED15: xen / xen-devel / xen-libs / xen-tools / xen-tools-domU / etc (SUSE-SU-2021:3968-1)

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3968-1 advisory. - CVE-2021-28702: Fixed PCI devices with RMRRs not deassigned correctly XSA-386 bsc1191363. - CVE-2021-28704, CVE-2021-28707,...

PT-2021-30168

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.11 Description The issue concerns the swiotlb-xen component, which is related to ensuring well-formed XENMEM exchange requests. The actual impact and attack plausibility have not yet been proven...

PT-2021-26173

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.11 Description: The issue concerns the swiotlb-xen component, which is related to ensuring well-formed XENMEM exchange requests. The actual impact and attack plausibility have not yet been proven...

PT-2020-16115

Name of the Vulnerable Software and Affected Versions Xen versions 4.12 through 4.14.x Description A missing unlock in the XENMEM acquire resource error path causes an RCU reference to be leaked. This can lead to a host Denial of Service when administration operations, such as CPU offline,...

ALPINE-CVE-2019-18423

An issue was discovered in Xen through 4.12.x allowing ARM guest OS users to cause a denial of service via a XENMEMaddtophysmap hypercall. p2m-maxmappedgfn is used by the functions p2mresolvetranslationfault and p2mgetentry to sanity check guest physical frame. The rest of the code in the two...

CVE-2019-17342

An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges by leveraging a race condition that arose when XENMEMexchange was introduced...

PT-2019-5140 · Xen +1 · Xen +1

Name of the Vulnerable Software and Affected Versions: Xen versions prior to 4.12 Description: The issue is related to a race condition in the XENMEM exchange component of the Xen hypervisor, which arose due to improper synchronization when accessing shared resources. This allows an attacker to...

Xen XENMEM_exchange Local Elevation of Privilege Vulnerability

Xen is an open source virtual machine monitor product developed by the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. A security vulnerability exists in X...

PT-2017-2369

Name of the Vulnerable Software and Affected Versions Xen versions 4.4.x through 4.8.x Description The issue is related to inadequate access control in the Xen hypervisor. It allows a local attacker to access hypervisor memory outside of the guest-provided input/output arrays due to insufficient...

PT-2015-2908

Name of the Vulnerable Software and Affected Versions Xen versions 4.6.x and earlier Description The issue is related to the improper enforcement of limits on page order inputs for certain suboperations, including XENMEM increase reservation, XENMEM populate physmap, and XENMEM exchange, within t...

PT-2015-7624

Name of the Vulnerable Software and Affected Versions Xen versions prior to 4.7 Description A race condition exists in the relinquish memory function, allowing local domains with partial management control to cause a denial of service, resulting in a host crash. This can be achieved through vecto...

PT-2015-7307

Name of the Vulnerable Software and Affected Versions Xen versions 4.5.x, 4.4.x, and earlier Description The issue is related to the xenmem add to physmap one function in arch/arm/mm.c, which does not limit the number of printk console messages when reporting a failure to retrieve a reference on ...

DEBIAN-CVE-2012-5513

The XENMEMexchange handler in Xen 4.2 and earlier does not properly check the memory address, which allows local PV guest OS administrators to cause a denial of service crash or possibly gain privileges via unspecified vectors that overwrite memory in the hypervisor reserved range...

PT-2012-6000

Name of the Vulnerable Software and Affected Versions Xen versions prior to 4.2 Description The issue allows local guest administrators to cause a denial of service, resulting in a long loop and hang, by utilizing crafted extent order values in specific hypercalls. The affected hypercalls include...