CVSS: 9.8EPSS: 0%CPEs: 27EXPL: 0CVE-2013-1917 – Gentoo Linux Security Advisory 201309-24
https://notcve.org/view.php?id=CVE-2013-1917
19 Apr 2013 — Xen 3.1 through 4.x, when running 64-bit hosts on Intel CPUs, does not clear the NT flag when using an IRET after a SYSENTER instruction, which allows PV guest users to cause a denial of service (hypervisor crash) by triggering a #GP fault, which is not properly handled by another IRET instruction. Xen 3.1 a la 4.x, cuando ejecuta hosts con arquitectura de 64 bits en CPUs Intel, no limpia la bandera NT cuan emplea una IRET después de una instrucción SYSENTER, lo que permite a usuarios PV provocar una denega... • http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104537.html • CWE-20: Improper Input Validation •
CVSS: 9.8EPSS: 0%CPEs: 9EXPL: 0CVE-2013-1919 – Gentoo Linux Security Advisory 201309-24
https://notcve.org/view.php?id=CVE-2013-1919
19 Apr 2013 — Xen 4.2.x and 4.1.x does not properly restrict access to IRQs, which allows local stub domain clients to gain access to IRQs and cause a denial of service via vectors related to "passed-through IRQs or PCI devices." Xen 4.2.x y 4.1.x no restringe adecuadamente el acceso a las IRQs, lo que permite a clientes locales del subdominio obtener acceso a IRQs y provocar una denegación de servicio a través de vectores relacionados con "dispositivos PCI o passed-through IRQs". Multiple vulnerabilities have been found... • http://lists.fedoraproject.org/pipermail/package-announce/2013-May/104537.html • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 9.8EPSS: 0%CPEs: 29EXPL: 0CVE-2013-1920 – Gentoo Linux Security Advisory 201309-24
https://notcve.org/view.php?id=CVE-2013-1920
12 Apr 2013 — Xen 4.2.x, 4.1.x, and earlier, when the hypervisor is running "under memory pressure" and the Xen Security Module (XSM) is enabled, uses the wrong ordering of operations when extending the per-domain event channel tracking table, which causes a use-after-free and allows local guest kernels to inject arbitrary events and gain privileges via unspecified vectors. Xen v4.2.x, v4.1.x, y anteriores, cuando el hypervisor se está ejecutando "bajo presión de memoria" y el Módulo de Seguridad Xen (XSM) está activado,... • http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00015.html • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 9.6EPSS: 0%CPEs: 7EXPL: 0CVE-2013-0215 – Gentoo Linux Security Advisory 201309-24
https://notcve.org/view.php?id=CVE-2013-0215
07 Mar 2013 — oxenstored in Xen 4.1.x, Xen 4.2.x, and xen-unstable does not properly consider the state of the Xenstore ring during read operations, which allows guest OS users to cause a denial of service (daemon crash and host-control outage, or memory consumption) or obtain sensitive control-plane data by leveraging guest administrative access. oxenstored en Xen v4.1.x, Xen v4.2.x, y xen inestable no considera debidamente en cuenta el estado del anillo Xenstore durante las operaciones de lectura, que permite a usuario... • http://openwall.com/lists/oss-security/2013/02/05/10 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 6.1EPSS: 0%CPEs: 8EXPL: 0CVE-2012-5634 – Gentoo Linux Security Advisory 201309-24
https://notcve.org/view.php?id=CVE-2012-5634
14 Feb 2013 — Xen 4.2.x, 4.1.x, and 4.0, when using Intel VT-d for PCI passthrough, does not properly configure VT-d when supporting a device that is behind a legacy PCI Bridge, which allows local guests to cause a denial of service to other guests by injecting an interrupt. Xen v4.2.x, v4.1.x, y v4.0, cuando usa Intel VT-d para el paso por el PCI, no configura apropiadamente VT-d cuando soporta un dispositivo que esta detrás de un puente PCI heredado, lo que permite a invitados locales causar una denegación de servicio ... • http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html • CWE-16: Configuration •
CVSS: 8.4EPSS: 0%CPEs: 8EXPL: 0CVE-2013-0153 – kernel: xen: interrupt remap entries shared and old ones not cleared on AMD IOMMUs
https://notcve.org/view.php?id=CVE-2013-0153
14 Feb 2013 — The AMD IOMMU support in Xen 4.2.x, 4.1.x, 3.3, and other versions, when using AMD-Vi for PCI passthrough, uses the same interrupt remapping table for the host and all guests, which allows guests to cause a denial of service by injecting an interrupt into other guests. El soporte de Xen para AMD IOMMU en v4.2.x, v4.1.x, v3.3, and otras versiones, cuando usa AMD-Vi para el paso por el PCI, usa la misma tabla para el trazado de interrupciones por el host y los anfitriones, lo que permite a los invitados causa... • http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html •
CVSS: 7.1EPSS: 0%CPEs: 11EXPL: 0CVE-2013-0231 – kernel: xen: pciback DoS via not rate limited log messages
https://notcve.org/view.php?id=CVE-2013-0231
13 Feb 2013 — The pciback_enable_msi function in the PCI backend driver (drivers/xen/pciback/conf_space_capability_msi.c) in Xen for the Linux kernel 2.6.18 and 3.8 allows guest OS users with PCI device access to cause a denial of service via a large number of kernel log messages. NOTE: some of these details are obtained from third party information. La función pciback_enable_msi en el controlador PCI backend (drivers/xen/pciback/conf_space_capability_msi.c) en Xen para Linux kernel v2.6.18 y v3.8, permite que los usuari... • http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00004.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.1EPSS: 0%CPEs: 11EXPL: 0CVE-2012-5511 – Gentoo Linux Security Advisory 201309-24
https://notcve.org/view.php?id=CVE-2012-5511
13 Dec 2012 — Stack-based buffer overflow in the dirty video RAM tracking functionality in Xen 3.4 through 4.1 allows local HVM guest OS administrators to cause a denial of service (crash) via a large bitmap image. Desbordamiento de búfer en la funcionalidad "dirty video RAM tracking" en Xen 3.4 a la 4.1, permite a los huespedes HVM administradores del sistema operativo local provocar una denegación de servicio (caída) a través de una imagen bitmap demasiado grande. Multiple vulnerabilities have been found in Xen, allowi... • http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 4.7EPSS: 0%CPEs: 12EXPL: 0CVE-2012-6333 – Gentoo Linux Security Advisory 201309-24
https://notcve.org/view.php?id=CVE-2012-6333
13 Dec 2012 — Multiple HVM control operations in Xen 3.4 through 4.2 allow local HVM guest OS administrators to cause a denial of service (physical CPU consumption) via a large input. Varias operaciones de control de HVM en Xen v3.4 hasta la v4.2 permiten a administradores de sistemas operativos invitados locales causar una denegación de servicio (excesivo consumo de CPU física) a través de una entrada de datos demasiado grande. Multiple vulnerabilities have been found in Xen, allowing attackers on a Xen Virtual Machine ... • http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html • CWE-399: Resource Management Errors •
CVSS: 9.1EPSS: 0%CPEs: 10EXPL: 0CVE-2012-5510 – Gentoo Linux Security Advisory 201309-24
https://notcve.org/view.php?id=CVE-2012-5510
07 Dec 2012 — Xen 4.x, when downgrading the grant table version, does not properly remove the status page from the tracking list when freeing the page, which allows local guest OS administrators to cause a denial of service (hypervisor crash) via unspecified vectors. Xen v4.x, cuando se baja la versión de la tabla de permisos, no elimina correctamente la página de estado de la lista de seguimiento cuando libera la página, lo que permite causar una denegación de servicio (caída del hipervisor) a los administradores de sis... • http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html •