CVE-2016-9815

Xen through 4.7.x allows local ARM guest OS users to cause a denial of service host panic by sending an asynchronous abort...

CVE-2016-9818

Xen through 4.7.x allows local ARM guest OS users to cause a denial of service host crash via vectors involving an asynchronous abort while at HYP...

CVE-2016-9816

Xen through 4.7.x allows local ARM guest OS users to cause a denial of service host crash via vectors involving an asynchronous abort while at EL2...

CVE-2016-9818

Xen through 4.7.x allows local ARM guest OS users to cause a denial of service host crash via vectors involving an asynchronous abort while at HYP...

PT-2017-10351

Name of the Vulnerable Software and Affected Versions Xen versions prior to 4.8 Description The issue allows local ARM guest OS users to cause a denial of service, resulting in a host crash. This can be achieved via vectors involving an asynchronous abort while at EL2. Recommendations For version...

PT-2017-10350

Name of the Vulnerable Software and Affected Versions Xen versions prior to 4.8 Description The issue allows local ARM guest OS users to cause a denial of service, resulting in a host panic, by sending an asynchronous abort. Recommendations For versions prior to 4.8, update to version 4.8 or late...

PT-2017-10353

Name of the Vulnerable Software and Affected Versions Xen versions prior to 4.8 Description The issue allows local ARM guest OS users to cause a denial of service, resulting in a host crash. This can be achieved via vectors involving an asynchronous abort while at HYP. Recommendations For Xen...

CVE-2016-9815: Improper Access Control

Xen through 4.7.x allows local ARM guest OS users to cause a denial of service host panic by sending an asynchronous abort...

CVE-2016-9818: Improper Access Control

Xen through 4.7.x allows local ARM guest OS users to cause a denial of service host crash via vectors involving an asynchronous abort while at HYP...

CVE-2016-9816: Improper Access Control

Xen through 4.7.x allows local ARM guest OS users to cause a denial of service host crash via vectors involving an asynchronous abort while at EL2...

CVE-2016-9817: Improper Access Control

Xen through 4.7.x allows local ARM guest OS users to cause a denial of service host crash via vectors involving a 1 data or 2 prefetch abort with the ESREL2.EA bit set...

PT-2017-10352

Name of the Vulnerable Software and Affected Versions Xen versions prior to 4.8 Description The issue allows local ARM guest OS users to cause a denial of service, resulting in a host crash. This can be achieved through vectors involving a data or prefetch abort with the ESR EL2.EA bit set...

Design/Logic Flaw

NTP before 4.2.8p7 and 4.3.x before 4.3.92, when mode7 is enabled, allows remote attackers to cause a denial of service ntpd abort by using the same IP address multiple times in an unconfig directive...

CVE-2016-2516: Improper Input Validation

NTP before 4.2.8p7 and 4.3.x before 4.3.92, when mode7 is enabled, allows remote attackers to cause a denial of service ntpd abort by using the same IP address multiple times in an unconfig directive...

openSUSE: Security Advisory for jasper (openSUSE-SU-2017:0101-1)

The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora 25 : xen (2016-1b868c23a9)

x86 CMPXCHG8B emulation fails to ignore operand size override XSA-200, CVE-2016-9932 1404262 ---- ARM guests may induce host asynchronous abort XSA-201, CVE-2016-9815, Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website...

Fedora 23 : xen (2016-cc2916dcf4)

ARM guests may induce host asynchronous abort XSA-201, CVE-2016-9815, CVE-2016-9816, CVE-2016-9817, CVE-2016-9818 1399747 qemu: Divide by zero vulnerability in cirrusdocopy 1399055 CVE-2016-9921, CVE-2016-9922 Qemu: 9pfs: memory leakage via proxy/handle callbacks 1402278 qemu ioport array overflo...

CVE-2016-9815

Xen through 4.7.x allows local ARM guest OS users to cause a denial of service host panic by sending an asynchronous abort...

ARM guests may induce host asynchronous abort

ISSUE DESCRIPTION Depending on how the hardware and firmware have been integrated, guest-triggered asynchronous aborts SError on ARMv8 may be received by the hypervisor. The current action is to crash the host. A guest might trigger an asynchronous abort when accessing memory mapped hardware in a...

tomcat: non-persistent DoS attack by feeding data by aborting an upload

It was found that Tomcat would keep connections open after processing requests with a large enough request body. A remote attacker could potentially use this flaw to exhaust the pool of available connections and preventing further, legitimate connections to the Tomcat server to be made...