Xen Hypervisor Memory Leak on Boot (XSA-235)

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by flaw within the pagealloc.c and asm-arm/numa.h due to not scrubbing the memory on boot. This could potentially leave sensitive information available to read after a reboot. This issue onl...

[SECURITY] Fedora 25 Update: xen-4.7.3-5.fc25

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

Xen Hypervisor Multiple Vulnerabilities (XSA-231 - XSA-234)

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by multiple vulnerabilities : - A flaw exists in the allocheappages function due to improper handling when 'node = MAXNUMNODES'. A guest attacker can use crafted hypercalls to execute...

[SECURITY] Fedora 25 Update: xen-4.7.3-4.fc25

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

[SECURITY] Fedora 26 Update: xen-4.8.2-2.fc26

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

The vulnerability of component mm.c (arch/x86/mm.c) in the Xen hypervisor and the XenServer server virtualization platform allows a perpetrator to increase their privileges.

The vulnerability of component mm.c arch/x86/mm.c in the Xen hypervisor and the XenServer server virtualization platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating locally, to enhance their privileges by using functions related t...

The vulnerability of the `xen_biovec_phys_mergeable` function in the `biomerge.c` driver (driver/xen/biomerge.c) of the Xen hypervisor and XenServer server virtualization platform allows a malicious actor to escalate their privileges, corrupt data flows of block devices, violate information confidentiality, and cause service failures.

The vulnerability of the xenbiovecphysmergeable function in the biomerge.c driver driver/xen/biomerge.c in the Xen hypervisor and XenServer server virtualization platform is related to deficiencies in access control for certain functions. Exploiting this vulnerability can allow an attacker to...

DEBIAN-CVE-2017-14318

An issue was discovered in Xen 4.5.x through 4.9.x. The function gnttabcacheflush handles GNTTABOPcacheflush grant table operations. It checks to see if the calling domain is the owner of the page that is to be operated on. If it is not, the owner's grant table is checked to see if a grant mappin...

ALPINE-CVE-2017-14316

A parameter verification issue was discovered in Xen through 4.9.x. The function allocheappages allows callers to specify the first NUMA node that should be used for allocations through the memflags parameter; the node is extracted using the MEMFgetnode macro. While the function checks to see if...

[SECURITY] Fedora 27 Update: xen-4.9.0-9.fc27

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

[SECURITY] Fedora 26 Update: xen-4.8.1-8.fc26

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

Xen Hypervisor Function Error Condition Handling Lock Release Failure Guest-to-Host DoS (XSA-235)

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by flaw in the xenmemaddtophysmapone function in arch/arm/mm.c that is triggered as the application fails to release a lock when handling certain error conditions. This may allow a privilege...

[SECURITY] Fedora 26 Update: xen-4.8.1-7.fc26

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

Xen memory corruption vulnerability (CNVD-2017-28619)

Xen is an open source virtual machine monitor product developed at the University of Cambridge in the United Kingdom. Xen suffers from a memory corruption vulnerability that allows an attacker to exploit the vulnerability to submit a specially crafted request to obtain sensitive information or...

The vulnerability of Xen hypervisors allows a attacker to gain privileged access to the host.

The vulnerability of Xen hypervisors is related to improper page transfer. Exploiting this vulnerability can allow a remote attacker to gain privileged access to the host from the host operating system...

The vulnerability of Xen hypervisors allows a malicious actor to gain privileged access to the host.

The vulnerability of Xen hypervisors is related to insufficient checking of memory distribution during P2M operations. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain privileged access to the host from the guest operating system...

The vulnerability of the grant-table component in the Xen hypervisor allows a attacker to trigger a service failure or gain privileged access to the host.

The vulnerability of the grant-table component in the Xen hypervisor is related to deficiencies in access control for GNTMAPdevicemap and GNTMAPhostmap. Exploiting this vulnerability could allow a malicious actor to trigger a service failure memory corruption or gain privileged access to the host...

The vulnerability of the grant-table component in the Xen hypervisor allows a perpetrator to obtain confidential information or enhance their privileges.

The vulnerability of the grant-table component in the Xen hypervisor is related to incorrect handling of information regarding certain simultaneous unmap calls. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain confidential information or enhance their...

The vulnerability of Xen hypervisors allows a attacker to trigger a service failure or gain privileged access to the host.

The vulnerability of Xen hypervisors is related to deficiencies in access control for GNTMAPdevicemap and GNTMAPhostmap provided that GNTMAPhostmap is in the unmapping mode. Exploiting this vulnerability can allow a malicious actor to cause a service failure memory corruption or gain privileged...

The vulnerability of Xen hypervisors allows a perpetrator to obtain confidential information or cause service failures.

The vulnerability of Xen hypervisors is related to insufficient checking of the ports accessed by the attackers. Exploiting this vulnerability can allow a remote attacker to cause service failures or obtain confidential information such as changing the zero pointer...