CVSS: 7.8EPSS: 0%CPEs: 8EXPL: 0CVE-2018-15471 – Ubuntu Security Notice USN-3819-1
https://notcve.org/view.php?id=CVE-2018-15471
17 Aug 2018 — An issue was discovered in xenvif_set_hash_mapping in drivers/net/xen-netback/hash.c in the Linux kernel through 4.18.1, as used in Xen through 4.11.x and other products. The Linux netback driver allows frontends to control mapping of requests to request queues. When processing a request to set or change this mapping, some input validation (e.g., for an integer overflow) was missing or flawed, leading to OOB access in hash handling. A malicious or buggy frontend may cause the (usually privileged) backend to... • http://xenbits.xen.org/xsa/advisory-270.html • CWE-125: Out-of-bounds Read •
CVSS: 6.0EPSS: 0%CPEs: 1EXPL: 0CVE-2018-15468 – Gentoo Linux Security Advisory 201810-06
https://notcve.org/view.php?id=CVE-2018-15468
17 Aug 2018 — An issue was discovered in Xen through 4.11.x. The DEBUGCTL MSR contains several debugging features, some of which virtualise cleanly, but some do not. In particular, Branch Trace Store is not virtualised by the processor, and software has to be careful to configure it suitably not to lock up the core. As a result, it must only be available to fully trusted guests. Unfortunately, in the case that vPMU is disabled, all value checking was skipped, allowing the guest to choose any MSR_DEBUGCTL setting it likes... • http://xenbits.xen.org/xsa/advisory-269.html • CWE-863: Incorrect Authorization •
CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0CVE-2018-15469 – Gentoo Linux Security Advisory 201810-06
https://notcve.org/view.php?id=CVE-2018-15469
17 Aug 2018 — An issue was discovered in Xen through 4.11.x. ARM never properly implemented grant table v2, either in the hypervisor or in Linux. Unfortunately, an ARM guest can still request v2 grant tables; they will simply not be properly set up, resulting in subsequent grant-related hypercalls hitting BUG() checks. An unprivileged guest can cause a BUG() check in the hypervisor, resulting in a denial-of-service (crash). Se ha descubierto un problema en Xen hasta las versiones 4.11.x. • http://xenbits.xen.org/xsa/advisory-268.html • CWE-400: Uncontrolled Resource Consumption •
CVSS: 7.8EPSS: 0%CPEs: 8EXPL: 0CVE-2018-14678 – Ubuntu Security Notice USN-3931-2
https://notcve.org/view.php?id=CVE-2018-14678
28 Jul 2018 — An issue was discovered in the Linux kernel through 4.17.11, as used in Xen through 4.11.x. The xen_failsafe_callback entry point in arch/x86/entry/entry_64.S does not properly maintain RBX, which allows local users to cause a denial of service (uninitialized memory usage and system crash). Within Xen, 64-bit x86 PV Linux guest OS users can trigger a guest OS crash or possibly gain privileges. Se ha descubierto un problema en el kernel de Linux hasta la versión 4.17.11, tal y como se utiliza en Xen hasta la... • http://www.securityfocus.com/bid/104924 • CWE-665: Improper Initialization •
CVSS: 9.9EPSS: 0%CPEs: 2EXPL: 0CVE-2018-12892 – Gentoo Linux Security Advisory 201810-06
https://notcve.org/view.php?id=CVE-2018-12892
29 Jun 2018 — An issue was discovered in Xen 4.7 through 4.10.x. libxl fails to pass the readonly flag to qemu when setting up a SCSI disk, due to what was probably an erroneous merge conflict resolution. Malicious guest administrators or (in some situations) users may be able to write to supposedly read-only disk images. Only emulated SCSI disks (specified as "sd" in the libxl disk configuration, or an equivalent) are affected. IDE disks ("hd") are not affected (because attempts to make them readonly are rejected). Addi... • http://www.openwall.com/lists/oss-security/2018/06/27/12 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 6.5EPSS: 0%CPEs: 3EXPL: 0CVE-2018-12891 – Gentoo Linux Security Advisory 201810-06
https://notcve.org/view.php?id=CVE-2018-12891
29 Jun 2018 — An issue was discovered in Xen through 4.10.x. Certain PV MMU operations may take a long time to process. For that reason Xen explicitly checks for the need to preempt the current vCPU at certain points. A few rarely taken code paths did bypass such checks. By suitably enforcing the conditions through its own page table contents, a malicious guest may cause such bypasses to be used for an unbounded number of iterations. • http://www.openwall.com/lists/oss-security/2018/06/27/10 •
CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0CVE-2018-12893 – Gentoo Linux Security Advisory 201810-06
https://notcve.org/view.php?id=CVE-2018-12893
29 Jun 2018 — An issue was discovered in Xen through 4.10.x. One of the fixes in XSA-260 added some safety checks to help prevent Xen livelocking with debug exceptions. Unfortunately, due to an oversight, at least one of these safety checks can be triggered by a guest. A malicious PV guest can crash Xen, leading to a Denial of Service. All Xen systems which have applied the XSA-260 fix are vulnerable. • http://www.openwall.com/lists/oss-security/2018/06/27/11 •
CVSS: 8.8EPSS: 0%CPEs: 4EXPL: 0CVE-2018-10982 – Gentoo Linux Security Advisory 201810-06
https://notcve.org/view.php?id=CVE-2018-10982
10 May 2018 — An issue was discovered in Xen through 4.10.x allowing x86 HVM guest OS users to cause a denial of service (unexpectedly high interrupt number, array overrun, and hypervisor crash) or possibly gain hypervisor privileges by setting up an HPET timer to deliver interrupts in IO-APIC mode, aka vHPET interrupt injection. Se ha descubierto un problema en Xen hasta las versiones 4.10.x que permite que usuarios invitados del sistema operativo x86 HVM provoquen una denegación de servicio (número de interrupción sorp... • http://openwall.com/lists/oss-security/2018/05/08/2 •
CVSS: 6.5EPSS: 0%CPEs: 4EXPL: 0CVE-2018-10981 – Gentoo Linux Security Advisory 201810-06
https://notcve.org/view.php?id=CVE-2018-10981
10 May 2018 — An issue was discovered in Xen through 4.10.x allowing x86 HVM guest OS users to cause a denial of service (host OS infinite loop) in situations where a QEMU device model attempts to make invalid transitions between states of a request. Se ha descubierto un problema en Xen hasta las versiones 4.10.x que permite que usuarios invitados del sistema operativo x86 HVM provoquen una denegación de servicio (bucle infinito del sistema operativo del host) en situaciones en las que un modelo de dispositivo QEMU inten... • http://openwall.com/lists/oss-security/2018/05/08/3 • CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop') •
CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0CVE-2018-10471 – Gentoo Linux Security Advisory 201810-06
https://notcve.org/view.php?id=CVE-2018-10471
27 Apr 2018 — An issue was discovered in Xen through 4.10.x allowing x86 PV guest OS users to cause a denial of service (out-of-bounds zero write and hypervisor crash) via unexpected INT 80 processing, because of an incorrect fix for CVE-2017-5754. Se ha descubierto un problema en Xen hasta las versiones 4.10.x que permite que los usuarios del sistema operativo PV x86 invitado provoquen una denegación de servicio (escritura en cero fuera de límites y cierre inesperado del hipervisor) mediante el procesamiento INT 80 ines... • http://www.securityfocus.com/bid/104003 • CWE-787: Out-of-bounds Write •