CVE-2017-10923

Xen through 4.8.x does not validate a vCPU array index upon the sending of an SGI, which allows guest OS users to cause a denial of service hypervisor crash, aka XSA-225...

Xen 'xen/arch/arm/gic.c' Denial of Service Vulnerability

Xen is an open source virtual machine monitor product developed at the University of Cambridge in the United Kingdom. Xen has a security vulnerability that allows an attacker to crash the system by submitting a special request that could be exploited...

PT-2017-11610

Name of the Vulnerable Software and Affected Versions Xen versions prior to 4.9 Description The issue allows guest OS users to cause a denial of service, resulting in a hypervisor crash, due to the lack of validation of a vCPU array index when sending an SGI. Recommendations For versions prior to...

CVE-2017-10919: Undefined Security Weakness

Xen through 4.8.x mishandles virtual interrupt injection, which allows guest OS users to cause a denial of service hypervisor crash, aka XSA-223...

CVE-2017-10923: Improper Input Validation

Xen through 4.8.x does not validate a vCPU array index upon the sending of an SGI, which allows guest OS users to cause a denial of service hypervisor crash, aka XSA-225...

PT-2017-11607

Name of the Vulnerable Software and Affected Versions Xen versions prior to 4.9 Description The issue is related to the mishandling of virtual interrupt injection, allowing guest OS users to cause a denial of service, which results in a hypervisor crash. Recommendations For Xen versions prior to...

[SECURITY] Fedora 24 Update: xen-4.6.5-7.fc24

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

Android Hypervisor Authentication Bypass

The vulnerability of the software interface of the Android operating system’s Hypervisor is related to the failure of authentication procedures. Exploiting this vulnerability allows a malicious actor to bypass the authentication process remotely...

Xen Hypervisor Memory Disclosure

The vulnerability of Xen hypervisors known as XSA-212 is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor, operating locally, to gain access to the hypervisor’s memory beyond the guest system’s input/output arrays, given that XSA-29 previously...

Xen 'shadow/common.c' elevation of privilege vulnerability

Xen is an open source virtual machine monitor. An elevation of privilege vulnerability exists in Xen 'shadow/common.c'. An attacker could exploit the vulnerability to gain elevated privileges...

Xen 'xen/arch/x86/irq.c' NULL Null Pointer Remote Denial of Service Vulnerability

Xen is an open source virtual machine monitor product developed at the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. A remote denial of service...

Xen 'xen/arch/arm/vgic.c' Denial of Service Vulnerability

Xen is an open source virtual machine monitor product developed at the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. A denial of service vulnerability...

arm: vgic: Out-of-bound access when sending SGIs

ISSUE DESCRIPTION ARM guests can send SGI i.e. IPI targeting a list of vCPUs using the MMIO register GICDSGIR GICv2 or System Register ICCSGI1R GICv3. However, the emulation code does not sanitize the list and will directly access an array without checking whether the array index is within bounds...

ARM guest disabling interrupt may crash Xen

ISSUE DESCRIPTION Virtual interrupt injection could be triggered by a guest when sending an SGI e.g IPI to any vCPU or by configuring timers. When the virtual interrupt is masked, a missing check in the injection path may result in reading invalid hardware register or crashing the host. IMPACT A...

Microsoft Windows Hypervisor Code Integrity Privilege Escalation Vulnerability (KB3217845)

This host is missing an important security update according to Microsoft KB3217845 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

CVE-2017-0193: Improper Handling of Exceptional Conditions

Windows Hyper-V in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to gain elevated privileges on a target guest operating system when Windows...

CVE-2015-9030

In all Android releases from CAF using the Linux kernel, the Hypervisor API could be misused to bypass authentication...

CVE-2015-9030

CVE-2015-9030 describes an authentication bypass in Android CAF builds that use the Linux kernel, via misused Hypervisor API. Affected: Android devices with CAF/Linux Kerenel stack; vulnerable component: Hypervisor API. Root cause: improper handling of Hypervisor API calls enabling bypass of auth...

Hypervisor Code Integrity Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Windows Hyper-V instruction emulation fails to properly enforce privilege levels. An attacker who successfully exploited this vulnerability could gain elevated privileges on a target guest operating system. The host operating system is not...

PT-2017-2296

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue is related to the Hypervisor API in Android, which could be misused to bypass authentication. This could allow a remote attacker to bypass the authentication procedure...