citrix xenserver 7.0 vulnerabilities and exploits

(subscribe to this query)

An issue exists in Linux Foundation xapi in Citrix XenServer up to and including 7.0. An authenticated read-only administrator can corrupt the host database.

Citrix Xenserver 7.0 Citrix Xenserver 6.5 Citrix Xenserver 6.2.0 Citrix Xenserver 6.0.2

An issue exists in Linux Foundation xapi in Citrix XenServer up to and including 7.0. An authenticated read-only administrator can cancel tasks of other administrators.

Citrix Xenserver 6.5 Citrix Xenserver 6.0.2 Citrix Xenserver 6.2.0 Citrix Xenserver 7.0

The xen_biovec_phys_mergeable function in drivers/xen/biomerge.c in Xen might allow local OS guest users to corrupt block device data streams and consequently obtain sensitive memory information, cause a denial of service, or gain host OS privileges by leveraging incorrect block ...

Xen Xen Citrix Xenserver 7.0 Citrix Xenserver 6.5 Citrix Xenserver 7.1 Citrix Xenserver 6.2.0 Citrix Xenserver 7.2 Citrix Xenserver 6.0.2

Xen up to and including 4.8.x allows local x86 PV guest OS kernel administrators to cause a denial of service (host hang or crash) by modifying the instruction stream asynchronously while performing certain kernel operations.

Xen Xen Citrix Xenserver 6.5 Citrix Xenserver 6.2.0 Citrix Xenserver 6.0.2 Citrix Xenserver 7.0

An issue exists in Xen up to and including 4.11.x on AMD x86 platforms, possibly allowing guest OS users to gain host OS privileges because TLB flushes do not always occur after IOMMU mapping changes.

Xen Xen Debian Debian Linux 9.0 Citrix Xenserver 7.0 Citrix Xenserver 7.5 Citrix Xenserver 7.6 Citrix Xenserver 7.1

An issue exists in Xen up to and including 4.11.x on AMD x86 platforms, possibly allowing guest OS users to gain host OS privileges because small IOMMU mappings are unsafely combined into larger ones.

Xen Xen Debian Debian Linux 9.0 Citrix Xenserver 7.0 Citrix Xenserver 7.5 Citrix Xenserver 7.6 Citrix Xenserver 7.1

An issue exists in Xen up to and including 4.11.x allowing 64-bit PV guest OS users to cause a denial of service (host OS crash) because #GP[0] can occur after a non-canonical address is passed to the TLB flushing code. NOTE: this issue exists because of an incorrect CVE-2017-575...

Xen Xen Citrix Xenserver 7.0 Citrix Xenserver 7.5 Citrix Xenserver 7.6 Citrix Xenserver 7.1 Debian Debian Linux 9.0

2 Github repositories

Xen allows local OS guest users to cause a denial of service (crash) or possibly obtain sensitive information or gain privileges via vectors involving transitive grants.

Xen Xen Citrix Xenserver 7.1 Citrix Xenserver 7.2 Citrix Xenserver 6.0.2 Citrix Xenserver 7.0 Citrix Xenserver 6.2.0 Citrix Xenserver 6.5 Debian Debian Linux 9.0 Debian Debian Linux 8.0

arch/x86/mm.c in Xen allows local PV guest OS users to gain host OS privileges via vectors related to map_grant_ref.

Xen Xen Citrix Xenserver 6.0.2 Citrix Xenserver 7.2 Citrix Xenserver 6.2.0 Citrix Xenserver 7.0 Citrix Xenserver 6.5 Citrix Xenserver 7.1 Debian Debian Linux 8.0 Debian Debian Linux 9.0

Xen 4.5.x up to and including 4.7.x do not implement Supervisor Mode Access Prevention (SMAP) whitelisting in 32-bit exception and event delivery, which allows local 32-bit PV guest OS kernels to cause a denial of service (hypervisor and VM crash) by triggering a safety check.

Xen Xen 4.7.0 Xen Xen 4.6.3 Xen Xen 4.5.0 Xen Xen 4.5.1 Xen Xen 4.6.1 Xen Xen 4.5.3 Xen Xen 4.6.0 Xen Xen 4.5.2 Citrix Xenserver 6.2.0 Citrix Xenserver 7.0 Citrix Xenserver 6.5.0 Citrix Xenserver 6.0.2 Citrix Xenserver 6.0 Citrix Xenserver 6.1

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook