CVE-2016-9637

The 1 ioportread and 2 ioportwrite functions in Xen, when qemu is used as a device model within Xen, might allow local x86 HVM guest OS administrators to gain qemu process privileges via vectors involving an out-of-range ioport access...

Buffer overflow

Buffer overflow in Xen 4.7.x and earlier allows local x86 HVM guest OS administrators on guests running with shadow paging to cause a denial of service via a pagetable update...

CVE-2015-4105

Xen 3.3.x through 4.5.x enables logging for PCI MSI-X pass-through error messages, which allows local x86 HVM guests to cause a denial of service host disk consumption via certain invalid operations...

CVE-2015-2752

The CVE-2015-2752 issue affects Xen 3.2.x–4.5.x (PCI passthrough) where the XEN_DOMCTL_memory_mapping hypercall is not preemptible, enabling local x86 HVM users to cause host CPU exhaustion (DoS) via crafted device-model requests (qemu-dm). Public advisories in Debian (DLA-479-1) and Mageia (MGAS...