6376 matches found
PT-2017-14117
Name of the Vulnerable Software and Affected Versions Xen versions prior to 4.10 Description An issue allows x86 HVM guest OS users to obtain sensitive information from the host OS or an arbitrary guest OS. This occurs because intercepted I/O operations can cause a write of data from uninitialize...
Citrix XenServer Multiple Security Updates (CTX228867)
A number of security vulnerabilities have been identified in Citrix XenServer that may allow a malicious administrator of a guest VM to compromise the host. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
xen elevation of privilege vulnerability (CNVD-2017-30243)
Xen is an open source virtual machine monitor developed by the Xen Project. Xen suffers from an elevation of privilege vulnerability. An attacker can exploit this vulnerability to gain elevated privileges...
xen denial of service vulnerability (CNVD-2017-30247)
Xen is an open source virtual machine monitor developed by the Xen Project. Xen has a denial of service vulnerability that can be exploited by attackers to cause a denial of service...
xen information disclosure vulnerability (CNVD-2017-30248)
Xen is an open source virtual machine monitor developed by the Xen Project. Xen has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...
xen memory leak vulnerability
Xen is an open source virtual machine monitor developed by the Xen Project. Xen suffers from a memory disclosure vulnerability that can be exploited by an attacker to cause a denial of service...
xen system memory access vulnerability
Xen is an open source virtual machine monitor developed by the Xen Project. The xen system has a memory access vulnerability that can be exploited by an attacker for elevation of privilege...
hypervisor stack leak in x86 I/O intercept code
ISSUE DESCRIPTION Intercepted I/O operations may deal with less than a full machine word's worth of data. While read paths had been the subject of earlier XSAs and hence have been fixed, at least one write path was found where the data stored into an internal structure could contain bits from an...
multiple MSI mapping issues on x86
ISSUE DESCRIPTION Multiple issues exist with the setup of PCI MSI interrupts: - unprivileged guests were permitted access to devices not owned by them, in particular allowing them to disable MSI or MSI-X on any device - HVM guests can trigger a codepath intended only for PV guests - some failure...
x86: Incorrect handling of self-linear shadow mappings with translated guests
ISSUE DESCRIPTION The shadow pagetable code uses linear mappings to inspect and modify the shadow pagetables. A linear mapping which points back to itself is known as self-linear. For translated guests, the shadow linear mappings being in a separate address space are not intended to be self-linea...
PT-2017-3082
Name of the Vulnerable Software and Affected Versions Xen versions prior to 4.10 Description An issue in Xen allows x86 PV guest OS users to cause a denial of service or possibly gain privileges via crafted page-table stacking, resulting in unbounded recursion, stack consumption, and hypervisor...
How to configure console access on XenServer or Citrix Hypervisor
This article is for customers running Citrix Hypervisor or XenServer who want to configure serial console access to their XenServer hosts. In some support cases, serial console access to the XenServer host is required for debug purposes. The serial connection is to use with HyperTerminal or simil...
[SECURITY] Fedora 27 Update: xen-4.9.0-11.fc27
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...
Joyent SmartOS Hyprlofs FS IOCTL Native File System path Buffer Overflow Privilege Escalation Vulnerability(CVE-2016-9033)
Summary An exploitable buffer overflow exists in the the Joyent SmartOS OS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with the command HYPRLOFSADDENTRIES when dealing with native file systems. An attacker can craft an input that can cause a buffer...
Joyent SmartOS Hyprlofs FS IOCTL Native File System Integer Overflow Privilege Escalation Vulnerability(CVE-2016-8733)
Summary An exploitable integer overflow exists in the Joyent SmartOS OS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with the command HYPRLOFSADDENTRIES when dealing with native file systems. An attacker can craft an input that can cause a kernel...
Xen Hypervisor Memory Leak on Boot (XSA-235)
According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by flaw within the pagealloc.c and asm-arm/numa.h due to not scrubbing the memory on boot. This could potentially leave sensitive information available to read after a reboot. This issue onl...
VMware Management Tools CRLF Injection XSS
The vulnerability of the VMware vCenter Server and VMware ESXi hypervisor management infrastructure relates to the lack of measures to neutralize CRLF sequences. User-provided data is appended to HTTP responses without proper processing, allowing arbitrary headers to be inserted into HTTP...
SUSE SLES11 Security Update : xen (SUSE-SU-2017:2611-1)
This update for xen fixes several issues. These security issues were fixed : - CVE-2017-14316: Missing bound check in function allocheappages for an internal array allowed attackers using crafted hypercalls to execute arbitrary code within Xen XSA-231, bsc1056278 - CVE-2017-14317: A race in...