Xen Device Quarantine for Alternate PCI Assignment Methods Privilege Escalation Vulnerability (XSA-306)

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by a privilege escalation vulnerability due to an incomplete fix for CVE-2019-18424. An unauthenticated attacker with physical access to the device can exploit this issue, via an untrusted...

Xen Information Disclosure Vulnerability (XSA-305)

According to its self-reported version number, the Xen Hypervisor installed on the remote host is affected by an information disclosure vulnerability. A TSX Asynchronous Abort condition exists on some CPUs utilizing speculative execution. An authenticated, local attacker can exploit this to...

Xen Grant Table Transfer Issues on Large Hosts Denial of Service Vulnerability (XSA-284)

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by a denial of service vulnerability. When the code processing grant table transfer requests finds a page with an address too large to be represented in the interface with the guest, it...

The vulnerability of the xenvif_set_hash_mapping function in Xen hypervisors allows a malicious actor to gain unauthorized access to information and compromise its integrity and accessibility.

The vulnerability of the xenvifsethashmapping function in Xen hypervisors is related to integer overflow when processing requests to the netback driver. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information and compromise its integrity and availability...

The vulnerability of Xen hypervisors, related to improper error handling, allows a malicious actor to trigger a service failure.

The vulnerability of Xen hypervisors is related to incorrect error handling. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of Xen hypervisors, related to the swapping of the zero pointer, allows a attacker to trigger a service failure.

The vulnerability of Xen hypervisors is related to the handling of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of Xen hypervisors arises from the improper accounting of resources by external emulators, allowing a malicious actor to trigger a service failure or increase their privileges.

The vulnerability of Xen hypervisors is related to the improper accounting of resources from external emulators. Exploiting this vulnerability can allow an attacker to cause service failures or increase their privileges...

The vulnerability of Xen hypervisors relates to the situation where an operation is performed outside the buffer boundaries of memory, allowing a malicious actor to cause a service failure.

The vulnerability of Xen hypervisors relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

[SECURITY] Fedora 30 Update: xen-4.11.3-3.fc30

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

Xen Denial of Service Vulnerability (XSA-301)

According to its self-reported version number, the Xen Hypervisor installed on the remote host is affected by a denial of service vulnerability due to improper validation of input data. An authenticated, remote attack can exploit this, via a specially crafted hypercall followed by an access to an...

Fedora Update for xen FEDORA-2019-376ec5c107

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Xen 32-bit Arm Guest OS Denial Of Service vulnerability (XSA-307)

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by a denial of service vulnerability due to a mishandling of a certain bit iteration in 32-bit Arm systems. An authenticated local attacker can exploit this issue, to cause a denial of servi...

Xen VMentry Failure Denial Of Service vulnerability (XSA-308)

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by an denial of service vulnerability due to a mishandling of a certain case by VMX VMEntry. An unauthenticated remote attacker can exploit this issue, to cause a denial of service DOS. Note...

[SECURITY] Fedora 30 Update: xen-4.11.2-4.fc30

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

Xen Denial of Service Vulnerability (CNVD-2020-07294)

Xen is an open source virtual machine monitor product. A denial of service vulnerability exists in Xen 4.12. and earlier versions. The vulnerability stems from improper handling of certain bit iterations. An attacker could exploit this vulnerability to cause a denial of service...

DEBIAN-CVE-2019-19582

An issue was discovered in Xen through 4.12.x allowing x86 guest OS users to cause a denial of service infinite loop because certain bit iteration is mishandled. In a number of places bitmaps are being used by the hypervisor to track certain state. Iteration over all bits involves functions which...

UBUNTU-CVE-2019-19577

An issue was discovered in Xen through 4.12.x allowing x86 AMD HVM guest OS users to cause a denial of service or possibly gain privileges by triggering data-structure access during pagetable-height updates. When running on AMD systems with an IOMMU, Xen attempted to dynamically adapt the number ...

DEBIAN-CVE-2019-19579

An issue was discovered in Xen through 4.12.x allowing attackers to gain host OS privileges via DMA in a situation where an untrusted domain has access to a physical device and assignable-add is not used, because of an incomplete fix for CVE-2019-18424. XSA-302 relies on the use of libxl's...

[SECURITY] Fedora 31 Update: xen-4.12.1-7.fc31

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

Xen Restartable PV Type Change Operations Elevation of Privilege Vulnerability (XSA-299)

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by an elevation of privilege vulnerability due to race conditions in the pagetable promotion and demotion operations. An authenticated, remote attacker can exploit this issue, by triggering...