Page 9 of 348 results (0.015 seconds)

CVSS: 7.8EPSS: 0%CPEs: 3EXPL: 0

CVE-2019-17341 – Debian Security Advisory 4602-1

https://notcve.org/view.php?id=CVE-2019-17341

08 Oct 2019 — An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges by leveraging a page-writability race condition during addition of a passed-through PCI device. Se detectó un problema en Xen versiones hasta 4.11.x, permitiendo a usuarios del sistema operativo invitado PV de x86, causar una denegación de servicio u alcanzar privilegios mediante el aprovechamiento de una condición de carrera de escritura de página durante la adición de un dispositivo... • http://www.openwall.com/lists/oss-security/2019/10/25/6 • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') •

CVSS: 7.0EPSS: 0%CPEs: 3EXPL: 0

CVE-2019-17342 – Debian Security Advisory 4602-1

https://notcve.org/view.php?id=CVE-2019-17342

08 Oct 2019 — An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges by leveraging a race condition that arose when XENMEM_exchange was introduced. Se detectó un problema en Xen versiones hasta 4.11.x, permitiendo a usuarios del sistema operativo invitado PV de x86, causar una denegación de servicio u alcanzar privilegios mediante el aprovechamiento de una condición de carrera que surgió cuando se introdujo XENMEM_exchange. Multiple vulnerabilities hav... • http://www.openwall.com/lists/oss-security/2019/10/25/2 • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') •

CVSS: 6.8EPSS: 0%CPEs: 3EXPL: 0

CVE-2019-17343 – Debian Security Advisory 4602-1

https://notcve.org/view.php?id=CVE-2019-17343

08 Oct 2019 — An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges by leveraging incorrect use of the HVM physmap concept for PV domains. Se detectó un problema en Xen versiones hasta 4.11.x, permitiendo a usuarios del sistema operativo invitado PV de x86, causar una denegación de servicio u alcanzar privilegios mediante el aprovechamiento del uso incorrecto del concepto physmap de HVM para dominios PV. Multiple vulnerabilities have been discovered i... • http://www.openwall.com/lists/oss-security/2019/10/25/10 • CWE-667: Improper Locking •

CVSS: 6.5EPSS: 0%CPEs: 3EXPL: 0

CVE-2019-17344 – Debian Security Advisory 4602-1

https://notcve.org/view.php?id=CVE-2019-17344

08 Oct 2019 — An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service by leveraging a long-running operation that exists to support restartability of PTE updates. Se detectó un problema en Xen versiones hasta 4.11.x, permitiendo a usuarios del sistema operativo invitado PV de x86, causar una denegación de servicio mediante el aprovechamiento de una operación de larga ejecución que se presenta para soportar la reiniciabilidad de las actualizaciones PTE. Multiple vulnerabil... • http://www.openwall.com/lists/oss-security/2019/10/25/3 • CWE-662: Improper Synchronization •

CVSS: 6.5EPSS: 0%CPEs: 3EXPL: 0

CVE-2019-17345 – Debian Security Advisory 4602-1

https://notcve.org/view.php?id=CVE-2019-17345

08 Oct 2019 — An issue was discovered in Xen 4.8.x through 4.11.x allowing x86 PV guest OS users to cause a denial of service because mishandling of failed IOMMU operations causes a bug check during the cleanup of a crashed guest. Se detectó un problema en Xen versiones 4.8.x hasta 4.11.x, permitiendo a usuarios del sistema operativo invitado PV de x86, causar una denegación de servicio porque el manejo inapropiado de las operaciones fallidas de IOMMU causa una comprobación de errores durante la limpieza de un invitado b... • http://www.openwall.com/lists/oss-security/2019/10/25/4 •

CVSS: 8.8EPSS: 0%CPEs: 3EXPL: 0

CVE-2019-17346 – Debian Security Advisory 4602-1

https://notcve.org/view.php?id=CVE-2019-17346

08 Oct 2019 — An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges because of an incompatibility between Process Context Identifiers (PCID) and TLB flushes. Se detectó un problema en Xen versiones hasta 4.11.x, permitiendo a usuarios del sistema operativo invitado PV de x86, causar una denegación de servicio u alcanzar privilegios debido a una incompatibilidad entre los Identificadores de Contexto del Proceso (PCID) y las descargas de TLB. Multiple v... • http://www.openwall.com/lists/oss-security/2019/10/25/5 • CWE-20: Improper Input Validation •

CVSS: 7.8EPSS: 0%CPEs: 3EXPL: 0

CVE-2019-17347 – Debian Security Advisory 4602-1

https://notcve.org/view.php?id=CVE-2019-17347

08 Oct 2019 — An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges because a guest can manipulate its virtualised %cr4 in a way that is incompatible with Linux (and possibly other guest kernels). Se detectó un problema en Xen versiones hasta 4.11.x, permitiendo a usuarios del sistema operativo invitado PV de x86, causar una denegación de servicio u alcanzar privilegios porque un invitado puede manipular su %cr4 virtualizado en una manera que es incom... • http://www.openwall.com/lists/oss-security/2019/10/25/8 • CWE-20: Improper Input Validation •

CVSS: 6.5EPSS: 0%CPEs: 3EXPL: 0

CVE-2019-17348 – Debian Security Advisory 4602-1

https://notcve.org/view.php?id=CVE-2019-17348

08 Oct 2019 — An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service because of an incompatibility between Process Context Identifiers (PCID) and shadow-pagetable switching. Se detectó un problema en Xen versiones hasta 4.11.x, permitiendo a usuarios del sistema operativo invitado PV de x86, causar una denegación de servicio debido a una incompatibilidad entre los Identificadores de Contexto del Proceso (PCID) y la conmutación shadow-pagetable. Multiple vulnerabilities h... • http://www.openwall.com/lists/oss-security/2019/10/25/7 • CWE-20: Improper Input Validation •

CVSS: 5.5EPSS: 0%CPEs: 3EXPL: 0

CVE-2019-17349 – Debian Security Advisory 4602-1

https://notcve.org/view.php?id=CVE-2019-17349

08 Oct 2019 — An issue was discovered in Xen through 4.12.x allowing Arm domU attackers to cause a denial of service (infinite loop) involving a LoadExcl or StoreExcl operation. Se detectó un problema en Xen versiones hasta 4.12.x, permitiendo a atacantes Arm domU causar una denegación de servicio (bucle infinito) involucrando una operación LoadExcl o StoreExcl. Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in denial of service, guest-to-host privilege escalation or information l... • http://xenbits.xen.org/xsa/advisory-295.html • CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') •

CVSS: 5.5EPSS: 0%CPEs: 3EXPL: 0

CVE-2019-17350 – Debian Security Advisory 4602-1

https://notcve.org/view.php?id=CVE-2019-17350

08 Oct 2019 — An issue was discovered in Xen through 4.12.x allowing Arm domU attackers to cause a denial of service (infinite loop) involving a compare-and-exchange operation. Se detectó un problema en Xen versiones hasta 4.12.x, permitiendo a atacantes Arm domU causar una denegación de servicio (bucle infinito) involucrando una operación de comparar e intercambiar. Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in denial of service, guest-to-host privilege escalation or informat... • http://xenbits.xen.org/xsa/advisory-295.html • CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') •