Lucene search
K

21 matches found

Tenable Nessus
Tenable Nessus
added 2024/05/11 12:0 a.m.18 views

RHEL 5 : xsa218_xen (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - xsa218 xen: Races in the grant table unmap code XSA-218 CVE-2017-10913 - The grant-table feature in Xen...

9.7AI score0.01199EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2017/07/17 12:0 a.m.60 views

Fedora 26 : xen (2017-5c6a9b07a3)

xen: various flaws 1463247 blkif responses leak backend stack data XSA-216 page transfer may allow PV guest to elevate privilege XSA-217 Races in the grant table unmap code XSA-218 x86: insufficient reference counts during shadow emulation XSA-219 x86: PKRU and BND leakage between vCPU-s XSA-220...

10CVSS7AI score0.01672EPSS
Exploits0References11
Tenable Nessus
Tenable Nessus
added 2017/07/10 12:0 a.m.253 views

openSUSE Security Update : xen (openSUSE-2017-799)

This update for xen fixes several issues. These security issues were fixed : - CVE-2017-10912: Page transfer might have allowed PV guest to elevate privilege XSA-217, bsc1042882 - CVE-2017-10913 CVE-2017-10914: Races in the grant table unmap code allowed for informations leaks and potentially...

10CVSS6.9AI score0.01672EPSS
Exploits0References22
RedhatCVE
RedhatCVE
added 2017/07/07 2:54 p.m.24 views

CVE-2017-10914

The grant-table feature in Xen through 4.8.x has a race condition leading to a double free, which allows guest OS users to cause a denial of service memory consumption, or possibly obtain sensitive information or gain privileges, aka XSA-218 bug 2...

9.8CVSS5.7AI score0.01199EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2017/07/07 2:53 p.m.24 views

CVE-2017-10913

The grant-table feature in Xen through 4.8.x provides false mapping information in certain cases of concurrent unmap calls, which allows backend attackers to obtain sensitive information or gain privileges, aka XSA-218 bug 1...

9.8CVSS5.9AI score0.01199EPSS
Exploits0References2
Prion
Prion
added 2017/07/05 1:29 a.m.22 views

Information disclosure

The grant-table feature in Xen through 4.8.x provides false mapping information in certain cases of concurrent unmap calls, which allows backend attackers to obtain sensitive information or gain privileges, aka XSA-218 bug 1...

7.5CVSS9.1AI score0.01199EPSS
Exploits0References6Affected Software1
UbuntuCve
UbuntuCve
added 2017/07/05 1:29 a.m.27 views

CVE-2017-10914

The grant-table feature in Xen through 4.8.x has a race condition leading to a double free, which allows guest OS users to cause a denial of service memory consumption, or possibly obtain sensitive information or gain privileges, aka XSA-218 bug 2...

8.1CVSS7.2AI score0.00603EPSS
Exploits0References2
NVD
NVD
added 2017/07/05 1:29 a.m.16 views

CVE-2017-10914

The grant-table feature in Xen through 4.8.x has a race condition leading to a double free, which allows guest OS users to cause a denial of service memory consumption, or possibly obtain sensitive information or gain privileges, aka XSA-218 bug 2...

8.1CVSS7.9AI score0.00603EPSS
Exploits0References6
OSV
OSV
added 2017/07/05 1:29 a.m.21 views

CVE-2017-10914

The grant-table feature in Xen through 4.8.x has a race condition leading to a double free, which allows guest OS users to cause a denial of service memory consumption, or possibly obtain sensitive information or gain privileges, aka XSA-218 bug 2...

8.1CVSS7AI score
Exploits0References6
NVD
NVD
added 2017/07/05 1:29 a.m.20 views

CVE-2017-10913

The grant-table feature in Xen through 4.8.x provides false mapping information in certain cases of concurrent unmap calls, which allows backend attackers to obtain sensitive information or gain privileges, aka XSA-218 bug 1...

9.8CVSS8.4AI score0.01199EPSS
Exploits0References6
Prion
Prion
added 2017/07/05 1:29 a.m.23 views

Race condition

The grant-table feature in Xen through 4.8.x has a race condition leading to a double free, which allows guest OS users to cause a denial of service memory consumption, or possibly obtain sensitive information or gain privileges, aka XSA-218 bug 2...

6.8CVSS8.8AI score0.00603EPSS
Exploits0References6Affected Software1
OSV
OSV
added 2017/07/05 1:29 a.m.24 views

CVE-2017-10913

The grant-table feature in Xen through 4.8.x provides false mapping information in certain cases of concurrent unmap calls, which allows backend attackers to obtain sensitive information or gain privileges, aka XSA-218 bug 1...

9.8CVSS6.3AI score
Exploits0References6
CVE
CVE
added 2017/07/05 1:0 a.m.85 views

CVE-2017-10913

CVE-2017-10913 affects the Xen hypervisor grant-table handling up to 4.8.x. The vulnerability arises from concurrent unmap calls causing false grant mappings, enabling backend attackers to read sensitive data or escalate privileges (XSA-218 bug 1). Impact shown in multiple advisories; patches/wor...

9.8CVSS6.9AI score0.01199EPSS
Exploits0References6Affected Software1
Debian CVE
Debian CVE
added 2017/07/05 1:0 a.m.23 views

CVE-2017-10914

The grant-table feature in Xen through 4.8.x has a race condition leading to a double free, which allows guest OS users to cause a denial of service memory consumption, or possibly obtain sensitive information or gain privileges, aka XSA-218 bug 2...

8.1CVSS5.7AI score0.00603EPSS
Exploits0
Cvelist
Cvelist
added 2017/07/05 1:0 a.m.20 views

CVE-2017-10913

The grant-table feature in Xen through 4.8.x provides false mapping information in certain cases of concurrent unmap calls, which allows backend attackers to obtain sensitive information or gain privileges, aka XSA-218 bug 1...

7.1AI score0.01199EPSS
Exploits0References6
Cvelist
Cvelist
added 2017/07/05 1:0 a.m.17 views

CVE-2017-10914

The grant-table feature in Xen through 4.8.x has a race condition leading to a double free, which allows guest OS users to cause a denial of service memory consumption, or possibly obtain sensitive information or gain privileges, aka XSA-218 bug 2...

7.5AI score0.00603EPSS
Exploits0References6
CVE
CVE
added 2017/07/05 1:0 a.m.83 views

CVE-2017-10914

CVE-2017-10914 affects Xen (grant-table feature) through 4.8.x due to a race condition in grant handling that can cause a double free. Impact includes denial of service (memory consumption) and potential information disclosure or privilege escalation. Based on the sources, exploitability depends ...

8.1CVSS7.2AI score0.00603EPSS
Exploits0References6Affected Software1
Debian CVE
Debian CVE
added 2017/07/05 1:0 a.m.31 views

CVE-2017-10913

The grant-table feature in Xen through 4.8.x provides false mapping information in certain cases of concurrent unmap calls, which allows backend attackers to obtain sensitive information or gain privileges, aka XSA-218 bug 1...

9.8CVSS5.9AI score0.01199EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2017/07/03 12:0 a.m.49 views

Fedora 24 : xen (2017-b3bdaf58bc)

xen: various flaws 1463247 blkif responses leak backend stack data XSA-216 page transfer may allow PV guest to elevate privilege XSA-217 Races in the grant table unmap code XSA-218 x86: insufficient reference counts during shadow emulation XSA-219 x86: PKRU and BND leakage between vCPU-s XSA-220...

10CVSS7AI score0.01672EPSS
Exploits0References11
Tenable Nessus
Tenable Nessus
added 2017/07/03 12:0 a.m.39 views

SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2017:1742-1)

This update for xen fixes several issues. These security issues were fixed : - Page transfer might have allowed PV guest to elevate privilege XSA-217, bsc1042882 - Races in the grant table unmap code allowed for informations leaks and potentially privilege escalation XSA-218, bsc1042893 -...

7.8CVSS7AI score0.01106EPSS
Exploits0References16
Rows per page
Query Builder