18 matches found
EUVD-2020-20178
Malware in sbrugna...
EUVD-2019-7756
Malware in sbrugna...
EUVD-2018-2544
Malware in sbrugna...
EUVD-2019-9199
Malware in sbrugna...
CVE-2020-27672
An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a host OS denial of service, achieve data corruption, or possibly gain privileges by exploiting a race condition that leads to a use-after-free involving 2MiB and 1GiB superpages...
CVE-2020-27670: Insufficient Verification of Data Authenticity
An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a denial of service data corruption, cause a data leak, or possibly gain privileges because an AMD IOMMU page-table entry can be half-updated...
PT-2020-16759
Name of the Vulnerable Software and Affected Versions Xen versions through 4.14.x Description An issue allows x86 guest OS users to cause a denial of service, data corruption, or a data leak, and possibly gain privileges. This occurs because an AMD IOMMU page-table entry can be half-updated...
CVE-2020-27672: Concurrent Execution using Shared Resource with Improper Synchronization
An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a host OS denial of service, achieve data corruption, or possibly gain privileges by exploiting a race condition that leads to a use-after-free involving 2MiB and 1GiB superpages...
CVE-2019-19582
An issue was discovered in Xen through 4.12.x allowing x86 guest OS users to cause a denial of service infinite loop because certain bit iteration is mishandled. In a number of places bitmaps are being used by the hypervisor to track certain state. Iteration over all bits involves functions which...
PT-2019-5139
Name of the Vulnerable Software and Affected Versions Xen versions prior to 4.12 Description The issue is related to the mishandling of grant-table transfer requests, allowing x86 guest OS users to cause a denial of service or gain privileges. It is also associated with an insufficient input...
CVE-2018-19964
An issue was discovered in Xen 4.11.x allowing x86 guest OS users to cause a denial of service host OS hang because the p2m lock remains unavailable indefinitely in certain error conditions...
CVE-2018-19964: Undefined Security Weakness
An issue was discovered in Xen 4.11.x allowing x86 guest OS users to cause a denial of service host OS hang because the p2m lock remains unavailable indefinitely in certain error conditions...
Denial of service
An issue was discovered in Xen through 4.9.x allowing x86 guest OS users to cause a denial of service hypervisor crash or possibly gain privileges because MSI mapping was mishandled...
CVE-2017-15590
An issue was discovered in Xen through 4.9.x allowing x86 guest OS users to cause a denial of service hypervisor crash or possibly gain privileges because MSI mapping was mishandled...
PT-2017-14118
Name of the Vulnerable Software and Affected Versions Xen versions prior to 4.10 Description An issue in Xen allows x86 guest OS users to cause a denial of service hypervisor crash or possibly gain privileges because MSI mapping was mishandled. Recommendations For versions prior to 4.10, update t...
CVE-2017-15590: Undefined Security Weakness
An issue was discovered in Xen through 4.9.x allowing x86 guest OS users to cause a denial of service hypervisor crash or possibly gain privileges because MSI mapping was mishandled...
Code injection
Xen, when running on a 64-bit hypervisor, allows local x86 guest OS users to modify arbitrary memory and consequently obtain sensitive information, cause a denial of service host crash, or execute arbitrary code on the host by leveraging broken emulation of bit test instructions...
CVE-2016-9383
CVE-2016-9383 affects Xen when running on a 64‑bit hypervisor. The issue stems from broken emulation of bit test instructions, allowing a local x86 guest to modify arbitrary host memory and potentially obtain sensitive data, crash the host, or execute code on the host. Connected sources describe ...