Page 10 of 228 results (0.007 seconds)

CVSS: 8.8EPSS: 0%CPEs: 3EXPL: 0

CVE-2019-17346 – Debian Security Advisory 4602-1

https://notcve.org/view.php?id=CVE-2019-17346

08 Oct 2019 — An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges because of an incompatibility between Process Context Identifiers (PCID) and TLB flushes. Se detectó un problema en Xen versiones hasta 4.11.x, permitiendo a usuarios del sistema operativo invitado PV de x86, causar una denegación de servicio u alcanzar privilegios debido a una incompatibilidad entre los Identificadores de Contexto del Proceso (PCID) y las descargas de TLB. Multiple v... • http://www.openwall.com/lists/oss-security/2019/10/25/5 • CWE-20: Improper Input Validation •

CVSS: 7.8EPSS: 0%CPEs: 3EXPL: 0

CVE-2019-17347 – Debian Security Advisory 4602-1

https://notcve.org/view.php?id=CVE-2019-17347

08 Oct 2019 — An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges because a guest can manipulate its virtualised %cr4 in a way that is incompatible with Linux (and possibly other guest kernels). Se detectó un problema en Xen versiones hasta 4.11.x, permitiendo a usuarios del sistema operativo invitado PV de x86, causar una denegación de servicio u alcanzar privilegios porque un invitado puede manipular su %cr4 virtualizado en una manera que es incom... • http://www.openwall.com/lists/oss-security/2019/10/25/8 • CWE-20: Improper Input Validation •

CVSS: 6.5EPSS: 0%CPEs: 3EXPL: 0

CVE-2019-17348 – Debian Security Advisory 4602-1

https://notcve.org/view.php?id=CVE-2019-17348

08 Oct 2019 — An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service because of an incompatibility between Process Context Identifiers (PCID) and shadow-pagetable switching. Se detectó un problema en Xen versiones hasta 4.11.x, permitiendo a usuarios del sistema operativo invitado PV de x86, causar una denegación de servicio debido a una incompatibilidad entre los Identificadores de Contexto del Proceso (PCID) y la conmutación shadow-pagetable. Multiple vulnerabilities h... • http://www.openwall.com/lists/oss-security/2019/10/25/7 • CWE-20: Improper Input Validation •

CVSS: 5.5EPSS: 0%CPEs: 3EXPL: 0

CVE-2019-17349 – Debian Security Advisory 4602-1

https://notcve.org/view.php?id=CVE-2019-17349

08 Oct 2019 — An issue was discovered in Xen through 4.12.x allowing Arm domU attackers to cause a denial of service (infinite loop) involving a LoadExcl or StoreExcl operation. Se detectó un problema en Xen versiones hasta 4.12.x, permitiendo a atacantes Arm domU causar una denegación de servicio (bucle infinito) involucrando una operación LoadExcl o StoreExcl. Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in denial of service, guest-to-host privilege escalation or information l... • http://xenbits.xen.org/xsa/advisory-295.html • CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') •

CVSS: 5.5EPSS: 0%CPEs: 3EXPL: 0

CVE-2019-17350 – Debian Security Advisory 4602-1

https://notcve.org/view.php?id=CVE-2019-17350

08 Oct 2019 — An issue was discovered in Xen through 4.12.x allowing Arm domU attackers to cause a denial of service (infinite loop) involving a compare-and-exchange operation. Se detectó un problema en Xen versiones hasta 4.12.x, permitiendo a atacantes Arm domU causar una denegación de servicio (bucle infinito) involucrando una operación de comparar e intercambiar. Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in denial of service, guest-to-host privilege escalation or informat... • http://xenbits.xen.org/xsa/advisory-295.html • CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') •

CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0

CVE-2019-17351 – Ubuntu Security Notice USN-4286-1

https://notcve.org/view.php?id=CVE-2019-17351

08 Oct 2019 — An issue was discovered in drivers/xen/balloon.c in the Linux kernel before 5.2.3, as used in Xen through 4.12.x, allowing guest OS users to cause a denial of service because of unrestricted resource consumption during the mapping of guest memory, aka CID-6ef36ab967c7. Se detectó un problema en el archivo drivers/xen/balloon.c en el kernel de Linux versiones anteriores a 5.2.3, como es usado en Xen versiones hasta 4.12.x, permitiendo a usuarios del sistema operativo invitado causar una denegación de servici... • http://www.openwall.com/lists/oss-security/2019/10/25/9 • CWE-770: Allocation of Resources Without Limits or Throttling •

CVSS: 7.8EPSS: 0%CPEs: 6EXPL: 0

CVE-2018-19961 – Debian Security Advisory 4369-1

https://notcve.org/view.php?id=CVE-2018-19961

08 Dec 2018 — An issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS users to gain host OS privileges because TLB flushes do not always occur after IOMMU mapping changes. Se ha descubierto un problema en Xen hasta las versiones 4.11.x en plataformas AMD x86, que podría permitir que usuarios invitados del sistema operativo obtengan privilegios del host del sistema operativo. Esto se debe a que los vaciados TLB no siempre ocurren tras cambios en el mapeo de IOMMU. Multiple vulnerabil... • http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00072.html • CWE-459: Incomplete Cleanup •

CVSS: 7.8EPSS: 0%CPEs: 6EXPL: 0

CVE-2018-19962 – Debian Security Advisory 4369-1

https://notcve.org/view.php?id=CVE-2018-19962

08 Dec 2018 — An issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS users to gain host OS privileges because small IOMMU mappings are unsafely combined into larger ones. Se ha descubierto un problema en Xen hasta las versiones 4.11.x en plataformas AMD x86, que podría permitir que usuarios invitados del sistema operativo obtengan privilegios del host del sistema operativo. Esto se debe a que los mapeos de IOMMU pequeños se combinan de forma insegura con mapeos más grandes. Multipl... • http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00072.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0

CVE-2018-19963

https://notcve.org/view.php?id=CVE-2018-19963

08 Dec 2018 — An issue was discovered in Xen 4.11 allowing HVM guest OS users to cause a denial of service (host OS crash) or possibly gain host OS privileges because x86 IOREQ server resource accounting (for external emulators) was mishandled. Se ha descubierto un problema en Xen 4.11 que permite que usuarios HVM invitados del sistema operativo provoquen una denegación de servicio (cierre inesperado del host del sistema operativo) u obtengan privilegios del host del sistema operativo debido a que se ha gestionado de for... • http://www.securityfocus.com/bid/106182 • CWE-617: Reachable Assertion •

CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0

CVE-2018-19964

https://notcve.org/view.php?id=CVE-2018-19964

08 Dec 2018 — An issue was discovered in Xen 4.11.x allowing x86 guest OS users to cause a denial of service (host OS hang) because the p2m lock remains unavailable indefinitely in certain error conditions. Se ha descubierto un problema en Xen 4.11.x que permite que usuarios del sistema operativo x86 provoquen una denegación de servicio (bloqueo del sistema operativo del host) debido a que el bloqueo p2m se mantiene no disponible indefinidamente en ciertas condiciones de error. • http://www.securityfocus.com/bid/106182 •