fedoraproject fedora 24 vulnerabilities and exploits

(subscribe to this query)

2.1

CVSSv2

An issue exists in xenoprof in Xen up to and including 4.13.x, allowing guest OS users (without active profiling) to obtain sensitive information about other guests. Unprivileged guests can request to map xenoprof buffers, even if profiling has not been enabled for those guests. ...

Xen Xen 4.13.0 Xen Xen Debian Debian Linux 10.0 Fedoraproject Fedora 30 Fedoraproject Fedora 31 Fedoraproject Fedora 32 Opensuse Leap 15.1

8.5

CVSSv2

An issue exists in Xen up to and including 4.12.x allowing ARM guest OS users to cause a denial of service or gain privileges by leveraging the erroneous enabling of interrupts. Interrupts are unconditionally unmasked in exception handlers. When an exception occurs on an ARM syst...

Xen Xen Debian Debian Linux 9.0 Debian Debian Linux 10.0 Fedoraproject Fedora 29 Fedoraproject Fedora 30 Fedoraproject Fedora 31

6.3

CVSSv2

An issue exists in Xen up to and including 4.12.x allowing x86 PV guest OS users to cause a denial of service via a VCPUOP_initialise hypercall. hypercall_create_continuation() is a variadic function which uses a printf-like format string to interpret its parameters. Error handli...

Xen Xen Debian Debian Linux 9.0 Debian Debian Linux 10.0 Fedoraproject Fedora 29 Fedoraproject Fedora 30 Fedoraproject Fedora 31

6.9

CVSSv2

An issue exists in xenoprof in Xen up to and including 4.13.x, allowing guest OS users (with active profiling) to obtain sensitive information about other guests, cause a denial of service, or possibly gain privileges. For guests for which "active" profiling was enabled...

Xen Xen Xen Xen 4.13.0 Fedoraproject Fedora 30 Fedoraproject Fedora 31 Fedoraproject Fedora 32 Debian Debian Linux 10.0 Opensuse Leap 15.1

8.5

CVSSv2

An issue exists in Xen up to and including 4.12.x allowing ARM guest OS users to cause a denial of service via a XENMEM_add_to_physmap hypercall. p2m->max_mapped_gfn is used by the functions p2m_resolve_translation_fault() and p2m_get_entry() to sanity check guest physical fra...

Xen Xen Debian Debian Linux 9.0 Debian Debian Linux 10.0 Fedoraproject Fedora 29 Fedoraproject Fedora 30 Fedoraproject Fedora 31

6.9

CVSSv2

x86 pv: Race condition in typeref acquisition Xen maintains a type reference count for pages, in addition to a regular reference count. This scheme is used to maintain invariants required for Xen's safety, e.g. PV guests may not have direct writeable access to pagetables; up...

Xen Xen Fedoraproject Fedora 35 Fedoraproject Fedora 36 Debian Debian Linux 11.0

6.9

CVSSv2

An issue exists in Xen up to and including 4.13.x, allowing guest OS users to cause a denial of service or possibly gain privileges because of missing memory barriers in read-write unlock paths. The read-write unlock paths don't contain a memory barrier. On Arm, this means a...

Xen Xen Xen Xen 4.13.0 Fedoraproject Fedora 30 Fedoraproject Fedora 31 Fedoraproject Fedora 32 Debian Debian Linux 10.0 Opensuse Leap 15.1

7.2

CVSSv2

x86 pv: Insufficient care with non-coherent mappings T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Xen maintains a type reference count for pages, in addition to a regular reference count. This sch...

Xen Xen Fedoraproject Fedora 35 Fedoraproject Fedora 36 Debian Debian Linux 11.0

4.9

CVSSv2

An issue exists in Xen up to and including 4.13.x, allowing Arm guest OS users to cause a hypervisor crash because of a missing alignment check in VCPUOP_register_vcpu_info. The hypercall VCPUOP_register_vcpu_info is used by a guest to register a shared region with the hypervisor...

Xen Xen Debian Debian Linux 10.0 Fedoraproject Fedora 31 Fedoraproject Fedora 32

7.5

CVSSv2

aom_dsp/noise_model.c in libaom in AOMedia prior to 2021-03-24 has a buffer overflow.

Aomedia Aomedia Fedoraproject Fedora 34

Get Started

« PREV 1 2 3 4 5 6 7 8 9 10 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook