Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

citrix xenserver 6.5 vulnerabilities and exploits

(subscribe to this query)
6.5
CVSSv3

CVE-2017-5572

An issue exists in Linux Foundation xapi in Citrix XenServer up to and including 7.0. An authenticated read-only administrator can corrupt the host database.
Citrix Xenserver 7.0Citrix Xenserver 6.5Citrix Xenserver 6.0.2Citrix Xenserver 6.2.0
4.9
CVSSv3

CVE-2017-5573

An issue exists in Linux Foundation xapi in Citrix XenServer up to and including 7.0. An authenticated read-only administrator can cancel tasks of other administrators.
Citrix Xenserver 7.0Citrix Xenserver 6.5Citrix Xenserver 6.0.2Citrix Xenserver 6.2.0
6
CVSSv3

CVE-2016-10024

Xen up to and including 4.8.x allows local x86 PV guest OS kernel administrators to cause a denial of service (host hang or crash) by modifying the instruction stream asynchronously while performing certain kernel operations.
Xen XenCitrix Xenserver 7.0Citrix Xenserver 6.5Citrix Xenserver 6.0.2Citrix Xenserver 6.2.0
8.8
CVSSv3

CVE-2017-12134

The xen_biovec_phys_mergeable function in drivers/xen/biomerge.c in Xen might allow local OS guest users to corrupt block device data streams and consequently obtain sensitive memory information, cause a denial of service, or gain host OS privileges by leveraging incorrect block ...
Xen XenCitrix Xenserver 7.0Citrix Xenserver 7.1Citrix Xenserver 6.5Citrix Xenserver 6.0.2Citrix Xenserver 7.2Citrix Xenserver 6.2.0
8.8
CVSSv3

CVE-2017-12135

Xen allows local OS guest users to cause a denial of service (crash) or possibly obtain sensitive information or gain privileges via vectors involving transitive grants.
Xen XenCitrix Xenserver 7.0Citrix Xenserver 7.1Citrix Xenserver 6.5Citrix Xenserver 6.0.2Citrix Xenserver 7.2Citrix Xenserver 6.2.0Debian Debian Linux 8.0Debian Debian Linux 9.0
8.8
CVSSv3

CVE-2017-12137

arch/x86/mm.c in Xen allows local PV guest OS users to gain host OS privileges via vectors related to map_grant_ref.
Xen XenCitrix Xenserver 7.0Citrix Xenserver 7.1Citrix Xenserver 6.5Citrix Xenserver 6.0.2Citrix Xenserver 7.2Citrix Xenserver 6.2.0Debian Debian Linux 8.0Debian Debian Linux 9.0
5.5
CVSSv3

CVE-2016-10025

VMFUNC emulation in Xen 4.6.x up to and including 4.8.x on x86 systems using AMD virtualization extensions (aka SVM) allows local HVM guest OS users to cause a denial of service (hypervisor crash) by leveraging a missing NULL pointer check.
Xen Xen 4.6.0Xen Xen 4.7.0Xen Xen 4.6.4Xen Xen 4.6.3Xen Xen 4.7.1Xen Xen 4.6.1Xen Xen 4.8.0Citrix Xenserver 7.0Citrix Xenserver 6.5Citrix Xenserver 6.0.2Citrix Xenserver 6.2.0
7.8
CVSSv3

CVE-2017-12136

Race condition in the grant table code in Xen 4.6.x up to and including 4.9.x allows local guest OS administrators to cause a denial of service (free list corruption and host crash) or gain privileges on the host via vectors involving maptrack free list handling.
Xen Xen 4.6.0Xen Xen 4.7.0Xen Xen 4.6.6Xen Xen 4.6.4Xen Xen 4.6.3Xen Xen 4.7.1Xen Xen 4.6.1Xen Xen 4.8.0Xen Xen 4.9.0Xen Xen 4.8.1Xen Xen 4.7.3Xen Xen 4.6.5Xen Xen 4.7.2Citrix Xenserver 7.0Citrix Xenserver 7.1Citrix Xenserver 6.5Citrix Xenserver 6.0.2Citrix Xenserver 7.2Citrix Xenserver 6.2.0Debian Debian Linux 8.0Debian Debian Linux 9.0
NA

CVE-2015-4106

QEMU does not properly restrict write access to the PCI config space for certain PCI pass-through devices, which might allow local x86 HVM guests to gain privileges, cause a denial of service (host crash), obtain sensitive information, or possibly have other unspecified impact vi...
Qemu QemuDebian Debian Linux 8.0Debian Debian Linux 7.0Fedoraproject Fedora 22Fedoraproject Fedora 20Fedoraproject Fedora 21Suse Linux Enterprise Server 11Suse Linux Enterprise Desktop 11Suse Linux Enterprise Software Development Kit 11Suse Linux Enterprise Server 12Suse Linux Enterprise Software Development Kit 12Suse Linux Enterprise Desktop 12Citrix Xenserver 6.0.2Citrix Xenserver 6.0Citrix Xenserver 6.1.0Citrix Xenserver 6.5Citrix Xenserver 6.2.0Canonical Ubuntu Linux 14.10Canonical Ubuntu Linux 15.04Canonical Ubuntu Linux 12.04Canonical Ubuntu Linux 14.04
9.9
CVSSv3

CVE-2016-9603

A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support prior to 2.9; the issue could occur when a VNC client attempted to update its display after a VGA operation is performed by a guest. A privileged user/process insi...
Qemu QemuRedhat Enterprise Linux Desktop 7.0Citrix Xenserver 7.0Redhat Enterprise Linux Workstation 7.0Citrix Xenserver 7.1Redhat Openstack 5.0Redhat Enterprise Linux Server 7.0Redhat Openstack 7.0Citrix Xenserver 6.0.2Debian Debian Linux 7.0Citrix Xenserver 6.5Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Server 6.0Citrix Xenserver 6.2.0Redhat Enterprise Linux Workstation 6.0Redhat Openstack 6.0Redhat Enterprise Linux Server Aus 7.3Redhat Enterprise Linux Server Aus 7.4Redhat Enterprise Linux Server Eus 7.3Redhat Enterprise Linux Server Eus 7.4Redhat Enterprise Linux Server Eus 7.5Redhat Openstack 10
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
XPath injectioncross-site request forgeryCVE-2024-53505CVE-2024-53768CVE-2024-53743HTML injectionCVE-2024-49039CVE-2024-53786CVE-2014-2120
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook