CVE-2019-19581 vulnerabilities and exploits

(subscribe to this query)

2.1

CVSSv2

An issue exists in Xen up to and including 4.12.x allowing 32-bit Arm guest OS users to cause a denial of service (out-of-bounds access) because certain bit iteration is mishandled. In a number of places bitmaps are being used by the hypervisor to track certain state. Iteration o...

Xen Xen Fedoraproject Fedora 31

7.2

CVSSv2

An issue exists in Xen up to and including 4.12.x allowing x86 PV guest OS users to cause a denial of service via degenerate chains of linear pagetables, because of an incorrect fix for CVE-2017-15595. "Linear pagetables" is a technique which involves either pointing a ...

Xen Xen Fedoraproject Fedora 31

7.2

CVSSv2

An issue exists in Xen up to and including 4.12.x allowing malicious users to gain host OS privileges via DMA in a situation where an untrusted domain has access to a physical device (and assignable-add is not used), because of an incomplete fix for CVE-2019-18424. XSA-302 relies...

Xen Xen Fedoraproject Fedora 30

8.5

CVSSv2

An issue exists in Xen up to and including 4.12.x allowing ARM guest OS users to cause a denial of service or gain privileges by leveraging the erroneous enabling of interrupts. Interrupts are unconditionally unmasked in exception handlers. When an exception occurs on an ARM syst...

Xen Xen Debian Debian Linux 9.0 Debian Debian Linux 10.0 Fedoraproject Fedora 29 Fedoraproject Fedora 30 Fedoraproject Fedora 31

8.5

CVSSv2

An issue exists in Xen up to and including 4.12.x allowing ARM guest OS users to cause a denial of service via a XENMEM_add_to_physmap hypercall. p2m->max_mapped_gfn is used by the functions p2m_resolve_translation_fault() and p2m_get_entry() to sanity check guest physical fra...

Xen Xen Debian Debian Linux 9.0 Debian Debian Linux 10.0 Fedoraproject Fedora 29 Fedoraproject Fedora 30 Fedoraproject Fedora 31

2.1

CVSSv2

An issue exists in Xen up to and including 4.12.x allowing x86 guest OS users to cause a denial of service (infinite loop) because certain bit iteration is mishandled. In a number of places bitmaps are being used by the hypervisor to track certain state. Iteration over all bits i...

Xen Xen Fedoraproject Fedora 31

4.9

CVSSv2

An issue exists in Xen up to and including 4.12.x allowing Arm domU malicious users to cause a denial of service (infinite loop) involving a LoadExcl or StoreExcl operation.

Xen Xen Debian Debian Linux 9.0 Debian Debian Linux 10.0

4.9

CVSSv2

An issue exists in Xen up to and including 4.12.x allowing Arm domU malicious users to cause a denial of service (infinite loop) involving a compare-and-exchange operation.

Xen Xen Debian Debian Linux 9.0 Debian Debian Linux 10.0

7.2

CVSSv2

An issue exists in Xen up to and including 4.12.x allowing x86 AMD HVM guest OS users to cause a denial of service or possibly gain privileges by triggering data-structure access during pagetable-height updates. When running on AMD systems with an IOMMU, Xen attempted to dynamica...

Xen Xen Fedoraproject Fedora 31

6

CVSSv2

An issue exists in Xen up to and including 4.12.x allowing x86 PV guest OS users to gain host OS privileges by leveraging race conditions in pagetable promotion and demotion operations, because of an incomplete fix for CVE-2019-18421. XSA-299 addressed several critical issues in ...

Xen Xen Fedoraproject Fedora 31

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook