Lucene search
+L

874 matches found

Veracode
Veracode
added 2023/05/14 4:20 a.m.25 views

Mis-handling Cache Attributes

xen is vulnerable to Mis-handling Cache Attributes. The vulnerability allows entities controlling HVM guests to run the host out of resources or stall execution of a physical CPU for effectively unbounded periods of time which could lead to a denial of service to the affected users...

8.6CVSS6.7AI score0.01189EPSS
SaveExploits0References11Affected Software1
Xen Project
Xen Project
added 2023/04/25 12:00 p.m.76 views

x86 shadow paging arbitrary pointer dereference

ISSUE DESCRIPTION In environments where host assisted address translation is necessary but Hardware Assisted Paging HAP is unavailable, Xen will run guests in so called shadow mode. Due to too lax a check in one of the hypervisor routines used for shadow page handling it is possible for a guest...

7.8CVSS6.5AI score0.00264EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2023/04/06 12:00 a.m.38 views

Fedora 36 : xen (2023-04b5338dd0)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-04b5338dd0 advisory. 3 security issues 2180425 x86 shadow plus log-dirty mode use-after-free XSA-427, CVE-2022-42332 x86/HVM pinned cache attributes mis-handling XSA-428...

8.6CVSS6.7AI score0.01189EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2023/03/25 12:00 a.m.27 views

Fedora 38 : xen (2023-703f133eb3)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-703f133eb3 advisory. 3 security issues 2180425 x86 shadow plus log-dirty mode use-after-free XSA-427, CVE-2022-42332 x86/HVM pinned cache attributes mis-handling XSA-428...

8.6CVSS6.7AI score0.01189EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2023/03/22 4:10 a.m.7 views

SUSE CVE-2022-42333

x86/HVM pinned cache attributes mis-handling This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. To allow cachability control for HVM guests with passed through devices, an interface exists to explicitly override defaults...

6.7CVSS7.1AI score0.01189EPSS
SaveExploits0References16
Tenable Nessus
Tenable Nessus
added 2023/03/22 12:00 a.m.41 views

SUSE SLED15: xen / xen-devel / xen-doc-html / xen-libs / xen-libs-32bit / etc (SUSE-SU-2023:0848-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0848-1 advisory. - CVE-2022-42332: Fixed use-after-free in x86 shadow plus log-dirty mode bsc1209017. -...

8.6CVSS6.8AI score0.01189EPSS
SaveExploits0References13
OSV
OSV
added 2023/03/21 1:15 p.m.5 views

ALPINE-CVE-2022-42333

x86/HVM pinned cache attributes mis-handling This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. To allow cachability control for HVM guests with passed through devices, an interface exists to explicitly override defaults...

8.6CVSS7AI score0.01189EPSS
SaveExploits0References1
NVD
NVD
added 2023/03/21 1:15 p.m.27 views

CVE-2022-42333

x86/HVM pinned cache attributes mis-handling This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. To allow cachability control for HVM guests with passed through devices, an interface exists to explicitly override defaults...

8.6CVSS7.2AI score0.01189EPSS
SaveExploits0References7
NVD
NVD
added 2023/03/21 1:15 p.m.37 views

CVE-2022-42334

x86/HVM pinned cache attributes mis-handling This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. To allow cachability control for HVM guests with passed through devices, an interface exists to explicitly override defaults...

6.5CVSS7.2AI score0.00267EPSS
SaveExploits0References7
OSV
OSV
added 2023/03/21 1:15 p.m.30 views

CVE-2022-42333

x86/HVM pinned cache attributes mis-handling This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. To allow cachability control for HVM guests with passed through devices, an interface exists to explicitly override defaults...

8.6CVSS6.6AI score
SaveExploits0References7
OSV
OSV
added 2023/03/21 1:15 p.m.3 views

DEBIAN-CVE-2022-42333

x86/HVM pinned cache attributes mis-handling This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. To allow cachability control for HVM guests with passed through devices, an interface exists to explicitly override defaults...

8.6CVSS7.1AI score0.01189EPSS
SaveExploits0References1
OSV
OSV
added 2023/03/21 1:15 p.m.41 views

CVE-2022-42334

x86/HVM pinned cache attributes mis-handling This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. To allow cachability control for HVM guests with passed through devices, an interface exists to explicitly override defaults...

6.5CVSS6.6AI score
SaveExploits0References7
OSV
OSV
added 2023/03/21 1:15 p.m.4 views

ALPINE-CVE-2022-42334

x86/HVM pinned cache attributes mis-handling This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. To allow cachability control for HVM guests with passed through devices, an interface exists to explicitly override defaults...

6.5CVSS7AI score0.00267EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
added 2023/03/21 1:15 p.m.87 views

CVE-2022-42333

x86/HVM pinned cache attributes mis-handling This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. To allow cachability control for HVM guests with passed through devices, an interface exists to explicitly override defaults...

8.6CVSS7.4AI score0.01189EPSS
SaveExploits0
UbuntuCve
UbuntuCve
added 2023/03/21 1:15 p.m.33 views

CVE-2022-42334

x86/HVM pinned cache attributes mis-handling This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. To allow cachability control for HVM guests with passed through devices, an interface exists to explicitly override defaults...

6.5CVSS6.7AI score0.00267EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2023/03/21 1:15 p.m.27 views

CVE-2022-42333

x86/HVM pinned cache attributes mis-handling This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. To allow cachability control for HVM guests with passed through devices, an interface exists to explicitly override defaults...

8.6CVSS6.9AI score0.01189EPSS
SaveExploits0References6
OSV
OSV
added 2023/03/21 1:15 p.m.7 views

UBUNTU-CVE-2022-42333

x86/HVM pinned cache attributes mis-handling This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. To allow cachability control for HVM guests with passed through devices, an interface exists to explicitly override defaults...

8.6CVSS5.8AI score0.01189EPSS
SaveExploits0References7
AlpineLinux
AlpineLinux
added 2023/03/21 1:15 p.m.96 views

CVE-2022-42334

x86/HVM pinned cache attributes mis-handling This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. To allow cachability control for HVM guests with passed through devices, an interface exists to explicitly override defaults...

8.6CVSS7.4AI score0.01189EPSS
SaveExploits0
Prion
Prion
added 2023/03/21 1:15 p.m.29 views

Design/Logic Flaw

x86/HVM pinned cache attributes mis-handling This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. To allow cachability control for HVM guests with passed through devices, an interface exists to explicitly override defaults...

5CVSS7.1AI score0.01189EPSS
SaveExploits0References7Affected Software3
Prion
Prion
added 2023/03/21 1:15 p.m.33 views

Design/Logic Flaw

x86/HVM pinned cache attributes mis-handling This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. To allow cachability control for HVM guests with passed through devices, an interface exists to explicitly override defaults...

1.7CVSS7.1AI score0.01189EPSS
SaveExploits0References7Affected Software3
Rows per page
Query Builder