Lucene search
+L

1318 matches found

OSV
OSV
added 2021/08/27 7:15 p.m.4 views

DEBIAN-CVE-2021-28697

grant table v2 status pages may remain accessible after de-allocation Guest get permitted access to certain Xen-owned pages of memory. The majority of such pages remain allocated / associated with a guest for its entire lifetime. Grant table v2 status pages, however, get de-allocated when a guest...

7.8CVSS7.4AI score0.00263EPSS
SaveExploits0References1
OSV
OSV
added 2021/08/27 7:15 p.m.2 views

DEBIAN-CVE-2021-28698

long running loops in grant table handling In order to properly monitor resource use, Xen maintains information on the grant mappings a domain may create to map grants offered by other domains. In the process of carrying out certain actions, Xen would iterate over all such entries, including ones...

5.5CVSS5.6AI score0.00351EPSS
SaveExploits0References1
OSV
OSV
added 2021/08/27 7:15 p.m.4 views

ALPINE-CVE-2021-28698

long running loops in grant table handling In order to properly monitor resource use, Xen maintains information on the grant mappings a domain may create to map grants offered by other domains. In the process of carrying out certain actions, Xen would iterate over all such entries, including ones...

5.5CVSS6.7AI score0.00351EPSS
SaveExploits0References1
OSV
OSV
added 2021/08/27 7:15 p.m.31 views

CVE-2021-28698

long running loops in grant table handling In order to properly monitor resource use, Xen maintains information on the grant mappings a domain may create to map grants offered by other domains. In the process of carrying out certain actions, Xen would iterate over all such entries, including ones...

5.5CVSS0.2AI score
SaveExploits0References7
OSV
OSV
added 2021/08/27 7:15 p.m.4 views

DEBIAN-CVE-2021-28699

inadequate grant-v2 status frames array bounds check The v2 grant table interface separates grant attributes from grant status. That is, when operating in this mode, a guest has two tables. As a result, guests also need to be able to retrieve the addresses that the new status tracking table can b...

5.5CVSS5.5AI score0.00353EPSS
SaveExploits0References1
OSV
OSV
added 2021/08/27 7:15 p.m.6 views

ALPINE-CVE-2021-28697

grant table v2 status pages may remain accessible after de-allocation Guest get permitted access to certain Xen-owned pages of memory. The majority of such pages remain allocated / associated with a guest for its entire lifetime. Grant table v2 status pages, however, get de-allocated when a guest...

7.8CVSS6.9AI score0.00263EPSS
SaveExploits0References1
Prion
Prion
added 2021/08/27 7:15 p.m.26 views

Design/Logic Flaw

grant table v2 status pages may remain accessible after de-allocation Guest get permitted access to certain Xen-owned pages of memory. The majority of such pages remain allocated / associated with a guest for its entire lifetime. Grant table v2 status pages, however, get de-allocated when a guest...

4.6CVSS7.5AI score0.00263EPSS
SaveExploits0References6Affected Software3
ATTACKERKB
ATTACKERKB
added 2021/08/27 7:15 p.m.5 views

CVE-2021-28699

inadequate grant-v2 status frames array bounds check The v2 grant table interface separates grant attributes from grant status. That is, when operating in this mode, a guest has two tables. As a result, guests also need to be able to retrieve the addresses that the new status tracking table can b...

5.5CVSS5.4AI score0.00353EPSS
SaveExploits0References10Affected Software1
AlpineLinux
AlpineLinux
added 2021/08/27 7:15 p.m.59 views

CVE-2021-28699

inadequate grant-v2 status frames array bounds check The v2 grant table interface separates grant attributes from grant status. That is, when operating in this mode, a guest has two tables. As a result, guests also need to be able to retrieve the addresses that the new status tracking table can b...

5.5CVSS2.5AI score0.00353EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2021/08/27 7:15 p.m.4 views

CVE-2021-28697

grant table v2 status pages may remain accessible after de-allocation Guest get permitted access to certain Xen-owned pages of memory. The majority of such pages remain allocated / associated with a guest for its entire lifetime. Grant table v2 status pages, however, get de-allocated when a guest...

7.8CVSS5.5AI score0.00263EPSS
SaveExploits0References10Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/08/27 7:15 p.m.4 views

CVE-2021-28698

long running loops in grant table handling In order to properly monitor resource use, Xen maintains information on the grant mappings a domain may create to map grants offered by other domains. In the process of carrying out certain actions, Xen would iterate over all such entries, including ones...

5.5CVSS5.4AI score0.00351EPSS
SaveExploits0References11Affected Software1
Prion
Prion
added 2021/08/27 7:15 p.m.17 views

Design/Logic Flaw

inadequate grant-v2 status frames array bounds check The v2 grant table interface separates grant attributes from grant status. That is, when operating in this mode, a guest has two tables. As a result, guests also need to be able to retrieve the addresses that the new status tracking table can b...

4.9CVSS6.2AI score0.00353EPSS
SaveExploits0References6Affected Software3
AlpineLinux
AlpineLinux
added 2021/08/27 7:15 p.m.53 views

CVE-2021-28698

long running loops in grant table handling In order to properly monitor resource use, Xen maintains information on the grant mappings a domain may create to map grants offered by other domains. In the process of carrying out certain actions, Xen would iterate over all such entries, including ones...

5.5CVSS0.2AI score0.00351EPSS
SaveExploits0
Prion
Prion
added 2021/08/27 7:15 p.m.28 views

Design/Logic Flaw

long running loops in grant table handling In order to properly monitor resource use, Xen maintains information on the grant mappings a domain may create to map grants offered by other domains. In the process of carrying out certain actions, Xen would iterate over all such entries, including ones...

4.9CVSS6.4AI score0.00351EPSS
SaveExploits0References7Affected Software3
OSV
OSV
added 2021/08/27 7:15 p.m.4 views

UBUNTU-CVE-2021-28699

inadequate grant-v2 status frames array bounds check The v2 grant table interface separates grant attributes from grant status. That is, when operating in this mode, a guest has two tables. As a result, guests also need to be able to retrieve the addresses that the new status tracking table can b...

5.5CVSS6AI score0.00353EPSS
SaveExploits0References3
OSV
OSV
added 2021/08/27 7:15 p.m.4 views

UBUNTU-CVE-2021-28698

long running loops in grant table handling In order to properly monitor resource use, Xen maintains information on the grant mappings a domain may create to map grants offered by other domains. In the process of carrying out certain actions, Xen would iterate over all such entries, including ones...

5.5CVSS6AI score0.00351EPSS
SaveExploits0References3
OSV
OSV
added 2021/08/27 7:15 p.m.6 views

UBUNTU-CVE-2021-28697

grant table v2 status pages may remain accessible after de-allocation Guest get permitted access to certain Xen-owned pages of memory. The majority of such pages remain allocated / associated with a guest for its entire lifetime. Grant table v2 status pages, however, get de-allocated when a guest...

7.8CVSS5.8AI score0.00263EPSS
SaveExploits0References3
CVE
CVE
added 2021/08/27 6:37 p.m.173 views

CVE-2021-28697

CVE-2021-28697 concerns Xen grant table v2 status pages: race conditions in freeing/deallocation of grant-table pages can allow a guest to retain access to a memory page after it has been freed, potentially enabling memory access after switches between v2 and v1. The issue is caused by racing gue...

7.8CVSS7.5AI score0.00263EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
added 2021/08/27 6:37 p.m.39 views

CVE-2021-28697

grant table v2 status pages may remain accessible after de-allocation Guest get permitted access to certain Xen-owned pages of memory. The majority of such pages remain allocated / associated with a guest for its entire lifetime. Grant table v2 status pages, however, get de-allocated when a guest...

7.9AI score0.00263EPSS
SaveExploits0References6
Debian CVE
Debian CVE
added 2021/08/27 6:37 p.m.65 views

CVE-2021-28697

grant table v2 status pages may remain accessible after de-allocation Guest get permitted access to certain Xen-owned pages of memory. The majority of such pages remain allocated / associated with a guest for its entire lifetime. Grant table v2 status pages, however, get de-allocated when a guest...

7.8CVSS0.6AI score0.00263EPSS
SaveExploits0
Rows per page
Query Builder