citrix xenserver 7.0 vulnerabilities and exploits

(subscribe to this query)

VMFUNC emulation in Xen 4.6.x up to and including 4.8.x on x86 systems using AMD virtualization extensions (aka SVM) allows local HVM guest OS users to cause a denial of service (hypervisor crash) by leveraging a missing NULL pointer check.

Xen Xen 4.6.0 Xen Xen 4.6.1 Xen Xen 4.6.3 Xen Xen 4.6.4 Xen Xen 4.7.0 Xen Xen 4.7.1 Xen Xen 4.8.0 Citrix Xenserver 6.0.2 Citrix Xenserver 6.2.0 Citrix Xenserver 6.5 Citrix Xenserver 7.0

A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support prior to 2.9; the issue could occur when a VNC client attempted to update its display after a VGA operation is performed by a guest. A privileged user/process insi...

Qemu Qemu Citrix Xenserver 6.0.2 Citrix Xenserver 6.2.0 Citrix Xenserver 6.5 Citrix Xenserver 7.0 Citrix Xenserver 7.1 Redhat Openstack 5.0 Redhat Openstack 6.0 Redhat Openstack 7.0 Redhat Openstack 8 Redhat Openstack 9 Redhat Openstack 10

Race condition in the grant table code in Xen 4.6.x up to and including 4.9.x allows local guest OS administrators to cause a denial of service (free list corruption and host crash) or gain privileges on the host via vectors involving maptrack free list handling.

Xen Xen 4.6.0 Xen Xen 4.6.1 Xen Xen 4.6.3 Xen Xen 4.6.4 Xen Xen 4.6.5 Xen Xen 4.6.6 Xen Xen 4.7.0 Xen Xen 4.7.1 Xen Xen 4.7.2 Xen Xen 4.7.3 Xen Xen 4.8.0 Xen Xen 4.8.1

Citrix XenServer 7.0 before Hotfix XS70E003, when a deployment has been upgraded from an earlier release, might allow remote attackers on the management network to "compromise" a host by leveraging credentials for an Active Directory account.

Citrix Xenserver

The PV pagetable code in arch/x86/mm.c in Xen 4.7.x and previous versions allows local 32-bit PV guest OS administrators to gain host OS privileges by leveraging fast-paths for updating pagetable entries.

Xen Xen 3.4.0 Xen Xen 3.4.2 Xen Xen 3.4.3 Xen Xen 3.4.4 Xen Xen 4.0.0 Xen Xen 4.0.1 Xen Xen 4.0.3 Xen Xen 4.0.4 Xen Xen 4.1.0 Xen Xen 4.1.1 Xen Xen 4.1.2 Xen Xen 4.1.3

1 Article

QEMU does not properly restrict write access to the PCI config space for certain PCI pass-through devices, which might allow local x86 HVM guests to gain privileges, cause a denial of service (host crash), obtain sensitive information, or possibly have other unspecified impact vi...

Qemu Qemu Debian Debian Linux 7.0 Debian Debian Linux 8.0 Fedoraproject Fedora 20 Fedoraproject Fedora 21 Fedoraproject Fedora 22 Suse Linux Enterprise Desktop 11 Suse Linux Enterprise Desktop 12 Suse Linux Enterprise Server 11 Suse Linux Enterprise Server 12 Suse Linux Enterprise Software Development Kit 11 Suse Linux Enterprise Software Development Kit 12

Integer overflow in the VGA module in QEMU allows local guest OS users to cause a denial of service (out-of-bounds read and QEMU process crash) by editing VGA registers in VBE mode.

Oracle Vm Server 3.3 Oracle Vm Server 3.4 Qemu Qemu Qemu Qemu 2.6.0 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 15.10 Canonical Ubuntu Linux 16.04 Debian Debian Linux 8.0 Redhat Enterprise Linux Desktop 6.0 Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Server 6.0

An issue exists in Xen up to and including 4.10.x allowing x86 HVM guest OS users to cause a denial of service (unexpectedly high interrupt number, array overrun, and hypervisor crash) or possibly gain hypervisor privileges by setting up an HPET timer to deliver interrupts in IO-...

Xen Xen Debian Debian Linux 7.0 Debian Debian Linux 8.0 Debian Debian Linux 9.0

The VGA module in QEMU improperly performs bounds checking on banked access to video memory, which allows local guest OS administrators to execute arbitrary code on the host by changing access modes after setting the bank register, aka the "Dark Portal" issue.

Debian Debian Linux 8.0 Hp Helion Openstack 2.0.0 Hp Helion Openstack 2.1.0 Hp Helion Openstack 2.1.2 Hp Helion Openstack 2.1.4 Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 15.10 Canonical Ubuntu Linux 16.04 Qemu Qemu Qemu Qemu 2.6.0 Oracle Vm Server 3.2

The rate limiting feature in NTP 4.x prior to 4.2.8p4 and 4.3.x prior to 4.3.77 allows remote malicious users to have unspecified impact via a large number of crafted requests.

Ntp Ntp Ntp Ntp 4.2.8 Netapp Oncommand Performance Manager -Netapp Oncommand Unified Manager -Netapp Clustered Data Ontap -Netapp Data Ontap -Citrix Xenserver 6.0.2 Citrix Xenserver 6.2.0 Citrix Xenserver 6.5 Citrix Xenserver 7.0 Siemens Tim 4r-ie Firmware Siemens Tim 4r-ie Dnp3 Firmware

« PREV 1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook