CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2018-19963
https://notcve.org/view.php?id=CVE-2018-19963
An issue was discovered in Xen 4.11 allowing HVM guest OS users to cause a denial of service (host OS crash) or possibly gain host OS privileges because x86 IOREQ server resource accounting (for external emulators) was mishandled. Se ha descubierto un problema en Xen 4.11 que permite que usuarios HVM invitados del sistema operativo provoquen una denegación de servicio (cierre inesperado del host del sistema operativo) u obtengan privilegios del host del sistema operativo debido a que se ha gestionado de forma incorrecta el cálculo de recursos del servidor IOREQ x86. • http://www.securityfocus.com/bid/106182 https://xenbits.xen.org/xsa/advisory-276.html • CWE-617: Reachable Assertion •
CVSS: 7.8EPSS: 0%CPEs: 6EXPL: 0CVE-2018-19962
https://notcve.org/view.php?id=CVE-2018-19962
An issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS users to gain host OS privileges because small IOMMU mappings are unsafely combined into larger ones. Se ha descubierto un problema en Xen hasta las versiones 4.11.x en plataformas AMD x86, que podría permitir que usuarios invitados del sistema operativo obtengan privilegios del host del sistema operativo. Esto se debe a que los mapeos de IOMMU pequeños se combinan de forma insegura con mapeos más grandes. • http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00072.html http://www.securityfocus.com/bid/106182 https://lists.debian.org/debian-lts-announce/2019/10/msg00008.html https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UXC6BME7SXJI2ZIATNXCAH7RGPI4UKTT https://support.citrix.com/article/CTX239432 https://www.debian.org/security/2019/dsa-4369 https://xenbits.xen.org/xsa/advisory-275.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0CVE-2018-19967
https://notcve.org/view.php?id=CVE-2018-19967
An issue was discovered in Xen through 4.11.x on Intel x86 platforms allowing guest OS users to cause a denial of service (host OS hang) because Xen does not work around Intel's mishandling of certain HLE transactions associated with the KACQUIRE instruction prefix. Se ha descubierto un problema en Xen hasta las versiones 4.11.x en plataformas Intel x86 que permite que los usuarios del sistema operativo invitados provoquen una denegación de servicio (bloqueo del sistema operativo del host) debido a que Xen no soluciona la gestion incorrecta por parte de Intel de ciertas transacciones HLE asociadas con el prefijo de instrucción KACQUIRE. • http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00057.html http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00072.html http://www.securityfocus.com/bid/106182 https://support.citrix.com/article/CTX239432 https://www.debian.org/security/2019/dsa-4369 https://xenbits.xen.org/xsa/advisory-282.html • CWE-20: Improper Input Validation •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0CVE-2018-18883
https://notcve.org/view.php?id=CVE-2018-18883
An issue was discovered in Xen 4.9.x through 4.11.x, on Intel x86 platforms, allowing x86 HVM and PVH guests to cause a host OS denial of service (NULL pointer dereference) or possibly have unspecified other impact because nested VT-x is not properly restricted. Se ha descubierto un problema en Xen desde las versiones 4.9.x hasta las 4.11.x. en plataformas Intel x86, lo que permite que los invitados x86 HVM y PVH provoquen una denegación de servicio (desreferencia de puntero NULL) del sistema operativo u otro tipo de impacto sin especificar debido a que el VT-x anidado no está correctamente restringido. • http://www.securityfocus.com/bid/105817 http://www.securitytracker.com/id/1042021 https://xenbits.xen.org/xsa/advisory-278.html • CWE-476: NULL Pointer Dereference •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2018-15470
https://notcve.org/view.php?id=CVE-2018-15470
An issue was discovered in Xen through 4.11.x. The logic in oxenstored for handling writes depended on the order of evaluation of expressions making up a tuple. As indicated in section 7.7.3 "Operations on data structures" of the OCaml manual, the order of evaluation of subexpressions is not specified. In practice, different implementations behave differently. Thus, oxenstored may not enforce the configured quota-maxentity. • http://xenbits.xen.org/xsa/advisory-272.html https://lists.debian.org/debian-lts-announce/2018/11/msg00013.html https://security.gentoo.org/glsa/201810-06 • CWE-400: Uncontrolled Resource Consumption •