UBUNTU-CVE-2022-42330

Guests can cause Xenstore crash via soft reset When a guest issues a "Soft Reset" e.g. for performing a kexec the libxl based Xen toolstack will normally perform a XSRELEASE Xenstore operation. Due to a bug in xenstored this can result in a crash of xenstored. Any other use of XSRELEASE will have...

Xen Security Vulnerabilities

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. Xen XAPI before 2020-12-15 A security...

Xen Local Security Bypass Vulnerability (CNVD-2018-15165)

Xen is an open source virtual machine monitor, developed by the University of Cambridge. It is intended to run up to 102 full-featured operating systems on a single computer. A local security bypass vulnerability exists in Xen versions 4.7 through 4.10.x, which stems from a program's failure to...

DEBIAN-CVE-2017-15591

An issue was discovered in Xen 4.5.x through 4.9.x allowing attackers who control a stub domain kernel or tool stack to cause a denial of service host OS crash because of a missing comparison of range start to range end within the DMOP map/unmap implementation...