CVE-2007-5907

CVE-2007-5907 affects Xen (notably Xen 3.1.1 in the initial description) where guests could modify the CR4 TSC from within the guest environment, enabling a local denial of service. The connected documents corroborate that this issue is tied to the Xen feature allowing guests to hide or manipulat...

CVE-2007-3919

CVE-2007-3919 affects Xen 3.1 and earlier; the xenbaked and XenMon components allow local users to truncate arbitrary files via a symlink attack on /tmp/xenq-shm. This is a local-privilege issue that can enable data truncation. The MiracleLinux and OSV/OpenVAS/NASL entries corroborate Xen-related...

CVE-2007-4993

CVE-2007-4993 affects Xen 3.0.3: Pygrub (tools/pygrub/src/GrubConf.py) used when booting a guest domain. A local attacker with privileges in the guest can craft a grub.conf that is executed via exec statements, enabling arbitrary code execution in domain 0. This is a local, guest-to-domain-0 priv...

CVE-2007-5906

CVE-2007-5906 affects Xen 3.1.1 where a local-privilege user in a virtual guest can trigger a hypervisor crash by using a DR7 breakpoint, causing a denial of service. The issue is documented by SUSE and other vendors; remediation is to upgrade Xen to a fixed version (updates reference Xen 3.1.2 i...

CVE-2007-6207

CVE-2007-6207 affects Xen 3.x on IA-64 where mov_to_rr RID is not validated, allowing a VTi domain to read memory from other domains. The vulnerability enables partial confidentiality loss. Remediation, as evidenced by RHSA/CESA advisories and OpenV/OSS listings, is to apply the kernel updates th...

CVE-2008-1619

The CVE-2008-1619 issue affects Xen ssm_i emulation on IA64 in Xen 5.1, where crafted traffic can trigger a denial of service (dom0 panic). Connected advisories/Fixes referenced indicate the vulnerability lies in the Xen/IA64 barrier handling during FTP stress-test-like traffic, potentially leadi...