citrix xenserver 7.1 vulnerabilities and exploits

(subscribe to this query)

Citrix XenServer 7.1 and newer allows Directory Traversal.

Citrix Xenserver 7.1 Citrix Xenserver 7.4 Citrix Xenserver 7.5

The xen_biovec_phys_mergeable function in drivers/xen/biomerge.c in Xen might allow local OS guest users to corrupt block device data streams and consequently obtain sensitive memory information, cause a denial of service, or gain host OS privileges by leveraging incorrect block ...

Xen Xen Citrix Xenserver 6.0.2 Citrix Xenserver 6.2.0 Citrix Xenserver 6.5 Citrix Xenserver 7.0 Citrix Xenserver 7.1 Citrix Xenserver 7.2

An issue exists in Xen up to and including 4.11.x allowing 64-bit PV guest OS users to cause a denial of service (host OS crash) because #GP[0] can occur after a non-canonical address is passed to the TLB flushing code. NOTE: this issue exists because of an incorrect CVE-2017-575...

Xen Xen Citrix Xenserver 7.0 Citrix Xenserver 7.1 Citrix Xenserver 7.5 Citrix Xenserver 7.6 Debian Debian Linux 9.0

2 Github repositories

An issue exists in Xen up to and including 4.11.x on AMD x86 platforms, possibly allowing guest OS users to gain host OS privileges because TLB flushes do not always occur after IOMMU mapping changes.

Xen Xen Debian Debian Linux 9.0 Citrix Xenserver 7.0 Citrix Xenserver 7.1 Citrix Xenserver 7.5 Citrix Xenserver 7.6

An issue exists in Xen up to and including 4.11.x on AMD x86 platforms, possibly allowing guest OS users to gain host OS privileges because small IOMMU mappings are unsafely combined into larger ones.

Xen Xen Debian Debian Linux 9.0 Citrix Xenserver 7.0 Citrix Xenserver 7.1 Citrix Xenserver 7.5 Citrix Xenserver 7.6

Xen allows local OS guest users to cause a denial of service (crash) or possibly obtain sensitive information or gain privileges via vectors involving transitive grants.

Xen Xen Citrix Xenserver 6.0.2 Citrix Xenserver 6.2.0 Citrix Xenserver 6.5 Citrix Xenserver 7.0 Citrix Xenserver 7.1 Citrix Xenserver 7.2 Debian Debian Linux 8.0 Debian Debian Linux 9.0

arch/x86/mm.c in Xen allows local PV guest OS users to gain host OS privileges via vectors related to map_grant_ref.

Xen Xen Citrix Xenserver 6.0.2 Citrix Xenserver 6.2.0 Citrix Xenserver 6.5 Citrix Xenserver 7.0 Citrix Xenserver 7.1 Citrix Xenserver 7.2 Debian Debian Linux 8.0 Debian Debian Linux 9.0

Race condition in the grant table code in Xen 4.6.x up to and including 4.9.x allows local guest OS administrators to cause a denial of service (free list corruption and host crash) or gain privileges on the host via vectors involving maptrack free list handling.

Xen Xen 4.6.0 Xen Xen 4.6.1 Xen Xen 4.6.3 Xen Xen 4.6.4 Xen Xen 4.6.5 Xen Xen 4.6.6 Xen Xen 4.7.0 Xen Xen 4.7.1 Xen Xen 4.7.2 Xen Xen 4.7.3 Xen Xen 4.8.0 Xen Xen 4.8.1

A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support prior to 2.9; the issue could occur when a VNC client attempted to update its display after a VGA operation is performed by a guest. A privileged user/process insi...

Qemu Qemu Citrix Xenserver 6.0.2 Citrix Xenserver 6.2.0 Citrix Xenserver 6.5 Citrix Xenserver 7.0 Citrix Xenserver 7.1 Redhat Openstack 5.0 Redhat Openstack 6.0 Redhat Openstack 7.0 Redhat Openstack 8 Redhat Openstack 9 Redhat Openstack 10

The rate limiting feature in NTP 4.x prior to 4.2.8p4 and 4.3.x prior to 4.3.77 allows remote malicious users to have unspecified impact via a large number of crafted requests.

Ntp Ntp Ntp Ntp 4.2.8 Netapp Oncommand Performance Manager -Netapp Oncommand Unified Manager -Netapp Clustered Data Ontap -Netapp Data Ontap -Citrix Xenserver 6.0.2 Citrix Xenserver 6.2.0 Citrix Xenserver 6.5 Citrix Xenserver 7.0 Siemens Tim 4r-ie Firmware Siemens Tim 4r-ie Dnp3 Firmware

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook