1378 matches found
ALPINE-CVE-2020-29040
An issue was discovered in Xen through 4.14.x allowing x86 HVM guest OS users to cause a denial of service stack corruption, cause a data leak, or possibly gain privileges because of an off-by-one error. NOTE: this issue is caused by an incorrect fix for CVE-2020-27671...
Fedora: Security Advisory for xen (FEDORA-2020-6dd36a716c)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 31 Update: xen-4.12.3-8.fc31
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...
The vulnerability of Xen hypervisors arises from the simultaneous execution using a shared resource with incorrect synchronization. This “race condition” allows a malicious actor to cause a service failure or increase their privileges.
The vulnerability of Xen hypervisors arises from the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause service failures or increase their privileges...
Xen Platypus information leak via power sidechannel (XSA-351)
An information disclosure vulnerability exists in power/energy monitoring interfaces, which can be used to create covert channels and infer the operations and data used by other contexts within the system. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid142889;...
[SECURITY] Fedora 32 Update: xen-4.13.2-1.fc32
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...
[SECURITY] Fedora 33 Update: xen-4.14.0-9.fc33
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...
UBUNTU-CVE-2020-28368
Xen through 4.14.x allows guest OS administrators to obtain sensitive information such as AES keys from outside the guest via a side-channel attack on a power/energy monitoring interface, aka a "Platypus" attack. NOTE: there is only one logically independent fix: to change the access control for...
[SECURITY] Fedora 33 Update: xen-4.14.0-6.fc33
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...
Fedora: Security Advisory for xen (FEDORA-2020-97775b4234)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-27674
A flaw was found in the Xen hypercalls with INVLPG-like behavior used by x86 PV guests to invalidate TLB entries. This flaw allows a malicious unprivileged guest user to escalate their privileges to the kernel level within the guest. Mitigation There is no known mitigation for this flaw apart fro...
DEBIAN-CVE-2020-27673
An issue was discovered in the Linux kernel through 5.9.1, as used with Xen through 4.14.x. Guest OS users can cause a denial of service host OS hang via a high rate of events to dom0, aka CID-e99502f76271...
DEBIAN-CVE-2020-27674
An issue was discovered in Xen through 4.14.x allowing x86 PV guest OS users to gain guest OS privileges by modifying kernel memory contents, because invalidation of TLB entries is mishandled during use of an INVLPG-like attack technique...
DEBIAN-CVE-2020-27675
An issue was discovered in the Linux kernel through 5.9.1, as used with Xen through 4.14.x. drivers/xen/events/eventsbase.c allows event-channel removal during the event-handling loop a race condition. This can cause a use-after-free or NULL pointer dereference, as demonstrated by a dom0 crash vi...
UBUNTU-CVE-2020-27673
An issue was discovered in the Linux kernel through 5.9.1, as used with Xen through 4.14.x. Guest OS users can cause a denial of service host OS hang via a high rate of events to dom0, aka CID-e99502f76271...
PT-2020-4727 · Linux +5 · Linux Kernel +5
Name of the Vulnerable Software and Affected Versions: Linux kernel versions up to 5.9.1 Xen versions up to 4.14.x Description: An issue in the Linux kernel allows guest OS users to cause a denial of service, resulting in a host OS hang, by sending a high rate of events to dom0. This issue is...
Xen evtchn_reset() race conditions privelege escalation (XSA-339)
A privilege escalation vulnerability exists in EVTCHNOPreset potentially by a guest on itself or XENDOMCTLsoftreset due to a race condition present in evtchnreset. An authenticated, local attacker can exploit this, via a violation of various internal assumptions, to gain elevate their privilege t...
Xen x86 PV guest kernels DoS (XSA-339)
A denial of service DoS vulnerability exists in Xen servers when using x86 PV guest kernels due to a mishandling of SYSENTER state sanitization activities. An authenticated, local attacker can exploit this issue, via the SYSENTER instruction in 64bit mode, to cause a VM Denial of Service. Note th...
Fedora: Security Advisory for xen (FEDORA-2020-d46fe34349)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...