xen xen 3.2.3 vulnerabilities and exploits

(subscribe to this query)

Off-by-one error in the __addr_ok macro in Xen 3.3 and previous versions allows local 64 bit PV guest administrators to cause a denial of service (host crash) via unspecified hypercalls that ignore virtual-address bits.

Xen Xen Xen Xen 3.0.2 Xen Xen 3.0.3 Xen Xen 3.0.4 Xen Xen 3.1.3 Xen Xen 3.1.4 Xen Xen 3.2.0 Xen Xen 3.2.1 Xen Xen 3.2.2 Xen Xen 3.2.3

The pciback_enable_msi function in the PCI backend driver (drivers/xen/pciback/conf_space_capability_msi.c) in Xen for the Linux kernel 2.6.18 and 3.8 allows guest OS users with PCI device access to cause a denial of service via a large number of kernel log messages. NOTE: some o...

Linux Linux Kernel 2.6.18 Linux Linux Kernel 3.8 Xen Xen 3.0.2 Xen Xen 3.0.3 Xen Xen 3.0.4 Xen Xen 3.1.3 Xen Xen 3.1.4 Xen Xen 3.2.0 Xen Xen 3.2.1 Xen Xen 3.2.2 Xen Xen 3.2.3

The hypervisor_callback function in Xen, possibly prior to 3.4.0, as applied to the Linux kernel 2.6.30-rc4, 2.6.18, and probably other versions allows guest user applications to cause a denial of service (kernel oops) of the guest OS by triggering a segmentation fault in "c...

Xen Xen Xen Xen 2.0 Xen Xen 3.0.2 Xen Xen 3.0.3 Xen Xen 3.0.4 Xen Xen 3.1.2 Xen Xen 3.1.3 Xen Xen 3.1.4 Xen Xen 3.2 Xen Xen 3.2.0 Xen Xen 3.2.1 Xen Xen 3.2.2

The do_block_io_op function in (1) drivers/xen/blkback/blkback.c and (2) drivers/xen/blktap/blktap.c in Xen prior to 3.4.0 for the Linux kernel 2.6.18, and possibly other versions, allows guest OS users to cause a denial of service (infinite loop and CPU consumption) via a large ...

Citrix Xen Citrix Xen 3.0.2 Citrix Xen 3.0.3 Citrix Xen 3.0.4 Citrix Xen 3.1.3 Citrix Xen 3.1.4 Citrix Xen 3.2.0 Citrix Xen 3.2.1 Citrix Xen 3.2.2 Citrix Xen 3.2.3 Citrix Xen 3.3.0 Citrix Xen 3.3.1

The acceleration support for the "REP MOVS" instruction in Xen 4.4.x, 3.2.x, and previous versions lacks properly bounds checking for memory mapped I/O (MMIO) emulated in the hypervisor, which allows local HVM guests to cause a denial of service (host crash) via unspeci...

Redhat Enterprise Linux 5.0 Redhat Enterprise Linux Desktop 5.0 Xen Xen Xen Xen 3.2.1 Xen Xen 3.2.2 Xen Xen 3.2.3 Xen Xen 4.4.0 Xen Xen 4.4.1 Debian Debian Linux 7.0 Opensuse Opensuse 13.1 Opensuse Opensuse 13.2

Xen, possibly prior to 4.0.2, allows local 64-bit PV guests to cause a denial of service (host crash) by specifying user mode execution without user-mode pagetables.

Xen Xen Xen Xen 3.0.2 Xen Xen 3.0.3 Xen Xen 3.0.4 Xen Xen 3.1.3 Xen Xen 3.1.4 Xen Xen 3.2.0 Xen Xen 3.2.1 Xen Xen 3.2.2 Xen Xen 3.2.3 Xen Xen 3.3.0 Xen Xen 3.3.1

The backend driver in Xen 3.x allows guest OS users to cause a denial of service via a kernel thread leak, which prevents the device and guest OS from being shut down or create a zombie domain, causes a hang in zenwatch, or prevents unspecified xm commands from working properly, ...

Citrix Xen 3.0.2 Citrix Xen 3.0.3 Citrix Xen 3.0.4 Citrix Xen 3.1.3 Citrix Xen 3.1.4 Citrix Xen 3.2.0 Citrix Xen 3.2.1 Citrix Xen 3.2.2 Citrix Xen 3.2.3 Citrix Xen 3.3.0 Citrix Xen 3.3.1 Citrix Xen 3.3.2

Multiple integer overflows in the (1) FLASK_GETBOOL and (2) FLASK_SETBOOL suboperations in the flask hypercall in Xen 4.1.x, 3.3.x, 3.2.x, and previous versions, when XSM is enabled, allow local users to cause a denial of service (processor fault) via unspecified vectors, a diffe...

Xen Xen Xen Xen 3.2.0 Xen Xen 3.2.1 Xen Xen 3.2.2 Xen Xen 3.2.3 Xen Xen 3.3.0 Xen Xen 3.3.1 Xen Xen 3.3.2 Xen Xen 3.4.0 Xen Xen 3.4.1 Xen Xen 3.4.2 Xen Xen 3.4.3

Multiple integer overflows in the (1) FLASK_GETBOOL, (2) FLASK_SETBOOL, (3) FLASK_USER, and (4) FLASK_CONTEXT_TO_SID suboperations in the flask hypercall in Xen 4.3.x, 4.2.x, 4.1.x, 3.2.x, and previous versions, when XSM is enabled, allow local users to cause a denial of service ...

Xen Xen Xen Xen 3.2.0 Xen Xen 3.2.1 Xen Xen 3.2.2 Xen Xen 3.2.3 Xen Xen 3.3.0 Xen Xen 3.3.1 Xen Xen 3.3.2 Xen Xen 3.4.0 Xen Xen 3.4.1 Xen Xen 3.4.2 Xen Xen 3.4.3

The fixup_page_fault function in arch/x86/traps.c in Xen 4.0.1 and previous versions on 64-bit platforms, when paravirtualization is enabled, does not verify that kernel mode is used to call the handle_gdt_ldt_mapping_fault function, which allows guest OS users to cause a denial ...

Citrix Xen Citrix Xen 3.0.2 Citrix Xen 3.0.3 Citrix Xen 3.0.4 Citrix Xen 3.1.2 Citrix Xen 3.1.3 Citrix Xen 3.1.4 Citrix Xen 3.2.0 Citrix Xen 3.2.1 Citrix Xen 3.2.2 Citrix Xen 3.2.3 Citrix Xen 3.3.0

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook