SUSE CVE-2014-1666

The dophysdevop function in Xen 4.1.5, 4.1.6.1, 4.2.2 through 4.2.3, and 4.3.x does not properly restrict access to the 1 PHYSDEVOPpreparemsix and 2 PHYSDEVOPreleasemsix operations, which allows local PV guests to cause a denial of service host or guest malfunction or possibly gain privileges via...

SUSE CVE-2015-7813

Xen 4.4.x, 4.5.x, and 4.6.x does not limit the number of printk console messages when reporting unimplemented hypercalls, which allows local guests to cause a denial of service via a sequence of 1 HYPERVISORphysdevop hypercalls, which are not properly handled in the dophysdevop function in...

PT-2014-4284

Name of the Vulnerable Software and Affected Versions Xen versions 4.1.5 through 4.1.6.1 Xen versions 4.2.2 through 4.2.3 Xen version 4.3.x Description The issue concerns the do physdev op function, which does not properly restrict access to the PHYSDEVOP prepare msix and PHYSDEVOP release msix...

DEBIAN-CVE-2012-4536

The 1 domainpirqtoemuirq and 2 physdevunmappirq functions in Xen 2.2 allows local guest OS administrators to cause a denial of service Xen crash via a crafted pirq value that triggers an out-of-bounds read...

PT-2012-5467

Name of the Vulnerable Software and Affected Versions Xen version 2.2 Description The issue allows local guest OS administrators to cause a denial of service Xen crash via a crafted pirq value that triggers an out-of-bounds read in the domain pirq to emuirq and physdev unmap pirq functions...

PT-2012-4760

Name of the Vulnerable Software and Affected Versions Xen versions 4.1.x Citrix XenServer version 6.0.2 and earlier Description The issue allows guest OS users to cause a denial of service and possibly gain privileges via unspecified vectors. This is due to the physdev get free pirq hypercall in...