Lucene search
+L

1378 matches found

Positive Technologies
Positive Technologies
added 2022/11/01 12:0 a.m.6 views

PT-2022-7331 · Xen +1 · Xenstore +1

Name of the Vulnerable Software and Affected Versions: Xenstore affected versions not specified Description: The issue is related to uncontrolled resource allocation in the Xenstore storage of the Xen hypervisor. Exploitation can lead to a denial of service DoS of xenstored. Malicious guests can...

8.8CVSS6AI score0.00375EPSS
SaveExploits0References147
BDU FSTEC
BDU FSTEC
added 2022/10/18 12:0 a.m.9 views

The vulnerability of Xen hypervisors, related to the swapping of the zero pointer, allows a attacker to trigger a service failure.

The vulnerability of Xen hypervisors is related to the handling of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

6CVSS7.1AI score0.00385EPSS
SaveExploits0References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/10/18 12:0 a.m.10 views

The vulnerability of Xen hypervisors, related to the use of memory after it is freed, allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of Xen hypervisors is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause a service failure...

6.5CVSS7.6AI score0.0037EPSS
SaveExploits0References8Affected Software4
Tenable Nessus
Tenable Nessus
added 2022/10/10 12:0 a.m.38 views

Amazon Linux AMI : kernel (ALAS-2022-1636)

The version of kernel installed on the remote host is prior to 4.14.294-150.533. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2022-1636 advisory. An out-of-bounds write flaw was found in the Linux kernel's framebuffer-based console driver functionality in the w...

7.8CVSS6.9AI score0.07156EPSS
SaveExploits14References40
BDU FSTEC
BDU FSTEC
added 2022/10/10 12:0 a.m.8 views

The vulnerability of the Oxenstored component in the Xen hypervisor allows a hacker to execute arbitrary code.

The vulnerability of the Oxenstored component in the Xen hypervisor is related to the use of an unreliable search path. Exploiting this vulnerability allows an attacker to execute arbitrary code...

6CVSS6.6AI score0.00385EPSS
SaveExploits0References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/10/10 12:0 a.m.7 views

The vulnerability of Xen hypervisors relates to the unsafe management of privileges, allowing attackers to elevate their own privileges.

The vulnerability of Xen hypervisors is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

8.8CVSS7.4AI score0.00347EPSS
SaveExploits0References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/10/04 12:0 a.m.8 views

The vulnerability of Xen hypervisors, related to deficiencies in the authorization process, allows attackers to gain unauthorized access to protected information.

The vulnerability of Xen hypervisors is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

8.8CVSS7.6AI score0.00304EPSS
SaveExploits0References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/08/31 12:0 a.m.7 views

The vulnerability of the blkfront driver in the PV command of the Xen hypervisor allows a hacker to cause a service failure.

The vulnerability of the blkfront driver in the PV command of the Xen hypervisor is caused by synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service failures...

7CVSS6.5AI score0.00359EPSS
SaveExploits0References16Affected Software6
BDU FSTEC
BDU FSTEC
added 2022/08/31 12:0 a.m.9 views

The vulnerability of the Xen supervisor tool, caused by synchronization errors when using a shared resource, allows a malicious actor to trigger a service failure.

The vulnerability of the PV virtualization mode implementation in Xen hypervisors arises due to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

7CVSS6.5AI score0.0025EPSS
SaveExploits0References29Affected Software7
BDU FSTEC
BDU FSTEC
added 2022/08/31 12:0 a.m.7 views

The vulnerability of the SCSIFRONT driver in the PV command of the Xen hypervisor allows a hacker to cause a service failure.

The vulnerability of the PV driver of the Xen hypervisor is caused by synchronization errors when using a shared resource. Exploiting this vulnerability can allow attackers to cause service failures...

7CVSS6.5AI score0.00359EPSS
SaveExploits0References24Affected Software7
BDU FSTEC
BDU FSTEC
added 2022/08/31 12:0 a.m.7 views

The vulnerability of the hvc_xen component (console) of the Xen hypervisor allows a attacker to cause a service failure.

The vulnerability of the hvcxen component console of the Xen hypervisor is related to an uncontrolled resource consumption. Exploiting this vulnerability may allow a malicious actor to cause service interruptions remotely...

6.5CVSS6.5AI score0.00332EPSS
SaveExploits0References18Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/08/30 12:0 a.m.9 views

The vulnerability of the blkfront component in the Xen hypervisor allows a attacker to trigger a service failure.

The vulnerability of the blkfront component in the Xen hypervisor is related to resource release errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

3.5CVSS6.5AI score0.00332EPSS
SaveExploits0References19Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/08/22 12:0 a.m.9 views

The vulnerability of the netfront component in the Xen hypervisor allows a attacker to trigger a service failure.

The vulnerability of the netfront component in the Xen hypervisor is related to resource release errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

6.5CVSS6.6AI score0.00332EPSS
SaveExploits0References18Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/08/22 12:0 a.m.9 views

The vulnerability of the gntalloc driver of the Xen hypervisor allows a hacker to cause a service failure.

The vulnerability of the gntalloc driver in Xen hypervisors arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow attackers to cause service failures...

7CVSS6.5AI score0.00359EPSS
SaveExploits0References35Affected Software7
Amazon
Amazon
added 2022/08/18 12:0 a.m.12 views

Medium: kernel

Issue Overview: An out-of-bounds read flaw was found in the Linux kernel's TeleTYpe subsystem. The issue occurs in how a user triggers a race condition using ioctls TIOCSPTLCK and TIOCGPTPEER and TIOCSTI and TCXONC with leakage of memory in the flushtoldisc function. This flaw allows a local user...

7.8CVSS5.6AI score0.07156EPSS
SaveExploits3
BDU FSTEC
BDU FSTEC
added 2022/08/16 12:0 a.m.9 views

The vulnerabilities of components such as blkfront, netfront, scsifront, usbfront, dmabuf, xenbus, 9p, kbdfront, and pvcalls in the Xen hypervisor allow a malicious actor to cause service failures.

The vulnerabilities of the components blkfront, netfront, scsifront, usbfront, dmabuf, xenbus, 9p, kbdfront, and pvcalls in the Xen hypervisor are caused by synchronization errors when using a shared resource. Exploiting these vulnerabilities can allow attackers to cause service failures...

7CVSS6.5AI score0.00359EPSS
SaveExploits0References22Affected Software7
BDU FSTEC
BDU FSTEC
added 2022/08/16 12:0 a.m.10 views

The vulnerability of the xenbus component of the Xen hypervisor allows a attacker to cause a service failure.

The vulnerability of the xenbus component of the Xen hypervisor arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

7CVSS6.4AI score0.00359EPSS
SaveExploits0References35Affected Software7
Fedora
Fedora
added 2022/08/12 1:42 a.m.40 views

[SECURITY] Fedora 35 Update: xen-4.15.3-4.fc35

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

8.8CVSS7.3AI score0.03764EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/08/10 12:0 a.m.8 views

The vulnerability of the cross-platform hypervisor Xen in Linux operating systems allows a perpetrator to gain unauthorized access to protected information or cause service failures.

The vulnerability of the cross-platform hypervisor Xen in the Linux operating system is related to the disclosure of information. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information or cause service failures...

7.1CVSS6.4AI score0.00322EPSS
SaveExploits0References20Affected Software6
Fedora
Fedora
added 2022/07/23 2:27 a.m.60 views

[SECURITY] Fedora 35 Update: xen-4.15.3-2.fc35

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

7.2CVSS2.1AI score0.06451EPSS
SaveExploits3
Rows per page
Query Builder