Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

xen xen 4.6.4 vulnerabilities and exploits

(subscribe to this query)
6.8
CVSSv2
CVE-2017-8905
Xen up to and including 4.6.x on 64-bit platforms mishandles a failsafe callback, which might allow PV guest OS users to execute arbitrary code on the host OS, aka XSA-215.
Xen Xen 4.6.0Xen Xen 4.6.1Xen Xen 4.6.3Xen Xen 4.6.5Xen Xen 4.6.4Xen Xen 4.6.2
5
CVSSv2
CVE-2017-10923
Xen up to and including 4.8.x does not validate a vCPU array index upon the sending of an SGI, which allows guest OS users to cause a denial of service (hypervisor crash), aka XSA-225.
Xen Xen 4.6.0Xen Xen 4.8.1Xen Xen 4.7.1Xen Xen 4.8.0Xen Xen 4.6.4Xen Xen 4.6.5Xen Xen 4.6.1Xen Xen 4.6.2
5
CVSSv2
CVE-2017-10916
The vCPU context-switch implementation in Xen up to and including 4.8.x improperly interacts with the Memory Protection Extensions (MPX) and Protection Key (PKU) features, which makes it easier for guest OS users to defeat ASLR and other protection mechanisms, aka XSA-220.
Xen Xen 4.6.0Xen Xen 4.6.1Xen Xen 4.5.3Xen Xen 4.5.5Xen Xen 4.8.1Xen Xen 4.5.0Xen Xen 4.6.2Xen Xen 4.6.4Xen Xen 4.6.5Xen Xen 4.5.1Xen Xen 4.5.2Xen Xen 4.7.1Xen Xen 4.8.0
2.1
CVSSv2
CVE-2016-10025
VMFUNC emulation in Xen 4.6.x up to and including 4.8.x on x86 systems using AMD virtualization extensions (aka SVM) allows local HVM guest OS users to cause a denial of service (hypervisor crash) by leveraging a missing NULL pointer check.
Xen Xen 4.8.0Xen Xen 4.6.1Xen Xen 4.6.4Xen Xen 4.7.0Xen Xen 4.7.1Xen Xen 4.6.0Xen Xen 4.6.3Citrix Xenserver 7.0Citrix Xenserver 6.5Citrix Xenserver 6.2.0Citrix Xenserver 6.0.2
4.9
CVSSv2
CVE-2017-14318
An issue exists in Xen 4.5.x up to and including 4.9.x. The function `__gnttab_cache_flush` handles GNTTABOP_cache_flush grant table operations. It checks to see if the calling domain is the owner of the page that is to be operated on. If it is not, the owner's grant table i...
Xen Xen 4.5.0Xen Xen 4.6.3Xen Xen 4.6.4Xen Xen 4.8.0Xen Xen 4.8.1Xen Xen 4.6.0Xen Xen 4.6.1Xen Xen 4.7.2Xen Xen 4.7.3Xen Xen 4.5.3Xen Xen 4.5.5Xen Xen 4.7.0Xen Xen 4.7.1Xen Xen 4.5.1Xen Xen 4.5.2Xen Xen 4.6.5Xen Xen 4.6.6Xen Xen 4.9.0
2.1
CVSSv2
CVE-2017-12855
Xen maintains the _GTF_{read,writ}ing bits as appropriate, to inform the guest that a grant is in use. A guest is expected not to modify the grant details while it is in use, whereas the guest is free to modify/reuse the grant entry when it is not in use. Under some circumstances...
Xen Xen 4.8.0Xen Xen 4.7.0Xen Xen 4.5.3Xen Xen 4.5.5Xen Xen 4.7.2Xen Xen 4.7.3Xen Xen 4.6.0Xen Xen 4.6.1Xen Xen 4.7.1Xen Xen 4.6.6Xen Xen 4.6.3Xen Xen 4.6.4Xen Xen 4.5.0Xen Xen 4.9.0Xen Xen 4.8.1Xen Xen 4.5.1Xen Xen 4.5.2Xen Xen 4.6.5
4.9
CVSSv2
CVE-2017-15591
An issue exists in Xen 4.5.x up to and including 4.9.x allowing attackers (who control a stub domain kernel or tool stack) to cause a denial of service (host OS crash) because of a missing comparison (of range start to range end) within the DMOP map/unmap implementation.
Xen Xen 4.6.1Xen Xen 4.6.3Xen Xen 4.7.3Xen Xen 4.8.0Xen Xen 4.5.2Xen Xen 4.5.3Xen Xen 4.6.6Xen Xen 4.7.0Xen Xen 4.5.0Xen Xen 4.5.1Xen Xen 4.6.4Xen Xen 4.6.5Xen Xen 4.8.1Xen Xen 4.9.0Xen Xen 4.5.5Xen Xen 4.6.0Xen Xen 4.7.1Xen Xen 4.7.2
4.9
CVSSv2
CVE-2017-15596
An issue exists in Xen 4.4.x up to and including 4.9.x allowing ARM guest OS users to cause a denial of service (prevent physical CPU usage) because of lock mishandling upon detection of an add-to-physmap error.
Xen Xen 4.4.0Xen Xen 4.4.1Xen Xen 4.4.4Xen Xen 4.5.0Xen Xen 4.5.1Xen Xen 4.5.2Xen Xen 4.6.0Xen Xen 4.7.0Xen Xen 4.7.2Xen Xen 4.7.3Xen Xen 4.8.0Xen Xen 4.9.0Xen Xen 4.4.2Xen Xen 4.5.5Xen Xen 4.6.2Xen Xen 4.6.3Xen Xen 4.8.2Xen Xen 4.4.3Xen Xen 4.6.4Xen Xen 4.6.5Xen Xen 4.6.6Xen Xen 4.7.1
6.9
CVSSv2
CVE-2017-12136
Race condition in the grant table code in Xen 4.6.x up to and including 4.9.x allows local guest OS administrators to cause a denial of service (free list corruption and host crash) or gain privileges on the host via vectors involving maptrack free list handling.
Xen Xen 4.9.0Xen Xen 4.6.0Xen Xen 4.6.4Xen Xen 4.6.5Xen Xen 4.6.6Xen Xen 4.7.0Xen Xen 4.6.3Xen Xen 4.7.1Xen Xen 4.7.3Xen Xen 4.8.1Xen Xen 4.6.1Xen Xen 4.7.2Xen Xen 4.8.0Citrix Xenserver 6.2.0Citrix Xenserver 6.5Citrix Xenserver 7.0Citrix Xenserver 7.1Citrix Xenserver 6.0.2Citrix Xenserver 7.2Debian Debian Linux 8.0Debian Debian Linux 9.0
4.9
CVSSv2
CVE-2017-14431
Memory leak in Xen 3.3 up to and including 4.8.x allows guest OS users to cause a denial of service (ARM or x86 AMD host OS memory consumption) by continually rebooting, because certain cleanup is skipped if no pass-through device was ever assigned, aka XSA-207.
Xen Xen 3.3.0Xen Xen 3.3.1Xen Xen 3.3.2Xen Xen 4.0.1Xen Xen 4.0.2Xen Xen 4.1.4Xen Xen 4.1.5Xen Xen 4.2.5Xen Xen 4.3.0Xen Xen 4.4.1Xen Xen 4.4.2Xen Xen 4.5.5Xen Xen 4.6.0Xen Xen 3.4.0Xen Xen 3.4.1Xen Xen 4.0.3Xen Xen 4.0.4Xen Xen 4.1.6Xen Xen 4.1.6.1Xen Xen 4.3.1Xen Xen 4.3.2Xen Xen 4.4.3
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
path traversalCVE-2024-26978CVE-2024-26982wirelessCVE-2023-6949CVE-2024-26980CVE-2024-32766CVE-2024-26939cache poisoning
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook