CVE-2017-10912

CVE-2017-10912 affects Xen hypervisor; Xen 4.8.x and older mishandles page transfers (XSA-217), enabling a privileged guest OS escalation to host OS. The issue is central to Xen’s grant/page handling and can lead to host-level privilege escalation, per Debian/GLSA coverage. Remediation in public ...

CVE-2017-10918

Xen through 4.8.x does not validate memory allocations during certain P2M operations, which allows guest OS users to obtain privileged host OS access, aka XSA-222...

CVE-2017-10917

Xen through 4.8.x does not validate the port numbers of polled event channel ports, which allows guest OS users to cause a denial of service NULL pointer dereference and host OS crash or possibly obtain sensitive information, aka XSA-221...

CVE-2017-10918

CVE-2017-10918 concerns Xen, up to version 4.8.x, where memory allocations during certain P2M operations are not validated. This can let guest OS users obtain privileged host OS access (XSA-222). Impact is privilege escalation, with potential information leaks/DoS as noted in sources. The issue a...

CVE-2017-10917

CVE-2017-10917 refers to a NULL pointer dereference in Xen’s event polling code, which can allow a guest user to cause a denial of service on the host. It is listed among multiple Xen regressions resolved in Debian DSA-3969 and Debian’s corresponding package fixes for stretch (Xen 4.8.x line). Af...

CVE-2017-10918

Xen through 4.8.x does not validate memory allocations during certain P2M operations, which allows guest OS users to obtain privileged host OS access, aka XSA-222...

CVE-2017-10921

The grant-table feature in Xen through 4.8.x does not ensure sufficient type counts for a GNTMAPdevicemap and GNTMAPhostmap mapping, which allows guest OS users to cause a denial of service count mismanagement and memory corruption or obtain privileged host OS access, aka XSA-224 bug 2...

CVE-2017-10920

The grant-table feature in Xen through 4.8.x mishandles a GNTMAPdevicemap and GNTMAPhostmap mapping, when followed by only a GNTMAPhostmap unmapping, which allows guest OS users to cause a denial of service count mismanagement and memory corruption or obtain privileged host OS access, aka XSA-224...

CVE-2017-10922

The grant-table feature in Xen through 4.8.x mishandles MMIO region grant references, which allows guest OS users to cause a denial of service loss of grant trackability, aka XSA-224 bug 3...

CVE-2017-10919

Xen through 4.8.x mishandles virtual interrupt injection, which allows guest OS users to cause a denial of service hypervisor crash, aka XSA-223...

CVE-2017-10916

The vCPU context-switch implementation in Xen through 4.8.x improperly interacts with the Memory Protection Extensions MPX and Protection Key PKU features, which makes it easier for guest OS users to defeat ASLR and other protection mechanisms, aka XSA-220...

CVE-2017-10922

The grant-table feature in Xen through 4.8.x mishandles MMIO region grant references, which allows guest OS users to cause a denial of service loss of grant trackability, aka XSA-224 bug 3...

CVE-2017-10915

This CVE refers to Xen shadow-paging: through Xen up to 4.8.x, incorrect reference counting in shadow paging leads to a race that can let a guest OS user gain Xen privileges (XSA-219). The Debian DLA-1132 entry notes patching and fixes for related Xen issues, but does not specify exact patched ve...

CVE-2017-10911

Summary: CVE-2017-10911 affects the Linux kernel driver path drivers/block/xen-blkback/blkback.c, related to Xen block-interface responses (XSA-216). The vulnerability arises from copying uninitialized padding fields in Xen blkback response structures, which can let a guest OS user read host (or ...

CVE-2017-10912

Xen through 4.8.x mishandles page transfer, which allows guest OS users to obtain privileged host OS access, aka XSA-217...

CVE-2017-10916

CVE-2017-10916 is an information-leak flaw in the Xen vCPU context-switch handling of Memory Protection Extensions (MPX) and Protection Key (PKU). The issue enables guest OS users to potentially bypass ASLR and related protections. Public advisories (Debian, SUSE, Fedora/OpenVAS/NASL) associate t...

CVE-2017-10913

CVE-2017-10913 affects the Xen hypervisor grant-table handling up to 4.8.x. The vulnerability arises from concurrent unmap calls causing false grant mappings, enabling backend attackers to read sensitive data or escalate privileges (XSA-218 bug 1). Impact shown in multiple advisories; patches/wor...

CVE-2017-10921

CVE-2017-10921 affects the Xen hypervisor grant-table operations in Xen up to 4.8.x, where insufficient type counts for GNTMAP_device_map and GNTMAP_host_map can lead to count mismanagement, memory corruption, DoS, or privilege escalation to the host. Debian DLA-1132 documents the issue and notes...

CVE-2017-10919

Xen through 4.8.x mishandles virtual interrupt injection, which allows guest OS users to cause a denial of service hypervisor crash, aka XSA-223...

SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2017:1742-1)

This update for xen fixes several issues. These security issues were fixed : - Page transfer might have allowed PV guest to elevate privilege XSA-217, bsc1042882 - Races in the grant table unmap code allowed for informations leaks and potentially privilege escalation XSA-218, bsc1042893 -...