EUVD-2017-2550

Malware in sbrugna...

ALPINE-CVE-2023-34321

Arm provides multiple helpers to clean & invalidate the cache for a given region. This is, for instance, used when allocating guest memory to ensure any writes such as the ones during scrubbing have reached memory before handing over the page to a guest. Unfortunately, the arithmetics in the...

SUSE CVE-2021-26933

An issue was discovered in Xen 4.9 through 4.14.x. On Arm, a guest is allowed to control whether memory accesses are bypassing the cache. This means that Xen needs to ensure that all writes such as the ones during scrubbing have reached the memory before handing over the page to a guest...

The vulnerability of Xen hypervisors allows a attacker to gain privileged access to the host.

The vulnerability of Xen hypervisors is related to improper page transfer. Exploiting this vulnerability can allow a remote attacker to gain privileged access to the host from the host operating system...

DEBIAN-CVE-2017-10912

Xen through 4.8.x mishandles page transfer, which allows guest OS users to obtain privileged host OS access, aka XSA-217...

CVE-2017-10912

Xen through 4.8.x mishandles page transfer, which allows guest OS users to obtain privileged host OS access, aka XSA-217...

UBUNTU-CVE-2017-10912

Xen through 4.8.x mishandles page transfer, which allows guest OS users to obtain privileged host OS access, aka XSA-217...

CVE-2017-10912

Xen through 4.8.x mishandles page transfer, which allows guest OS users to obtain privileged host OS access, aka XSA-217...

ALPINE-CVE-2017-10912

Xen through 4.8.x mishandles page transfer, which allows guest OS users to obtain privileged host OS access, aka XSA-217...

CVE-2017-10912

Xen through 4.8.x mishandles page transfer, which allows guest OS users to obtain privileged host OS access, aka XSA-217...

CVE-2017-10912

Xen through 4.8.x mishandles page transfer, which allows guest OS users to obtain privileged host OS access, aka XSA-217...

CVE-2017-10912

Xen through 4.8.x mishandles page transfer, which allows guest OS users to obtain privileged host OS access, aka XSA-217...

CVE-2017-10912

CVE-2017-10912 affects Xen hypervisor; Xen 4.8.x and older mishandles page transfers (XSA-217), enabling a privileged guest OS escalation to host OS. The issue is central to Xen’s grant/page handling and can lead to host-level privilege escalation, per Debian/GLSA coverage. Remediation in public ...

CVE-2017-10912: Undefined Security Weakness

Xen through 4.8.x mishandles page transfer, which allows guest OS users to obtain privileged host OS access, aka XSA-217...

PT-2017-2431

Name of the Vulnerable Software and Affected Versions Xen versions prior to 4.9 Description The issue is related to the mishandling of page transfer, allowing guest OS users to obtain privileged host OS access. Exploitation of this issue may enable a remote attacker to gain privileged access to t...

Xen Page Transfer 'xen/arch/x86/mm.c' Local Elevation of Privilege Vulnerability

Xen is an open source virtual machine monitor product developed at the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. Xen suffers from a local elevation o...

Xen Page Transfer 'xen/arch/x86/mm.c' elevation of privilege vulnerability

Xen is an open source virtual machine monitor product developed at the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. An elevation of privilege...

page transfer may allow PV guest to elevate privilege

ISSUE DESCRIPTION Domains controlling other domains are permitted to map pages owned by the domain being controlled. If the controlling domain unmaps such a page without flushing the TLB, and if soon after the domain being controlled transfers this page to another PV domain via GNTTABOPtransfer o...