xen xen 4.9.0 vulnerabilities and exploits

(subscribe to this query)

An issue exists in Xen up to and including 4.9.x allowing x86 PV guest OS users to execute arbitrary code on the host OS because of a race condition that can cause a stale TLB entry.

An issue exists in Xen up to and including 4.9.x allowing x86 HVM guest OS users to obtain sensitive information from the host OS (or an arbitrary guest OS) because intercepted I/O operations can cause a write of data from uninitialized hypervisor stack memory.

An issue exists in Xen up to and including 4.9.x allowing x86 guest OS users to cause a denial of service (hypervisor crash) or possibly gain privileges because MSI mapping was mishandled.

An issue exists in Xen 4.5.x up to and including 4.9.x. The function `__gnttab_cache_flush` handles GNTTABOP_cache_flush grant table operations. It checks to see if the calling domain is the owner of the page that is to be operated on. If it is not, the owner's grant table i...

Xen Xen 4.5.0 Xen Xen 4.5.1 Xen Xen 4.5.2 Xen Xen 4.5.3 Xen Xen 4.5.5 Xen Xen 4.6.0 Xen Xen 4.6.1 Xen Xen 4.6.3 Xen Xen 4.6.4 Xen Xen 4.6.5 Xen Xen 4.6.6 Xen Xen 4.7.0

An issue exists in Xen 4.5.x up to and including 4.9.x allowing attackers (who control a stub domain kernel or tool stack) to cause a denial of service (host OS crash) because of a missing comparison (of range start to range end) within the DMOP map/unmap implementation.

Xen Xen 4.5.0 Xen Xen 4.5.1 Xen Xen 4.5.2 Xen Xen 4.5.3 Xen Xen 4.5.5 Xen Xen 4.6.0 Xen Xen 4.6.1 Xen Xen 4.6.3 Xen Xen 4.6.4 Xen Xen 4.6.5 Xen Xen 4.6.6 Xen Xen 4.7.0

Xen maintains the _GTF_{read,writ}ing bits as appropriate, to inform the guest that a grant is in use. A guest is expected not to modify the grant details while it is in use, whereas the guest is free to modify/reuse the grant entry when it is not in use. Under some circumstances...

Xen Xen 4.5.0 Xen Xen 4.5.1 Xen Xen 4.5.2 Xen Xen 4.5.3 Xen Xen 4.5.5 Xen Xen 4.6.0 Xen Xen 4.6.1 Xen Xen 4.6.3 Xen Xen 4.6.4 Xen Xen 4.6.5 Xen Xen 4.6.6 Xen Xen 4.7.0

Race condition in the grant table code in Xen 4.6.x up to and including 4.9.x allows local guest OS administrators to cause a denial of service (free list corruption and host crash) or gain privileges on the host via vectors involving maptrack free list handling.

Xen Xen 4.6.0 Xen Xen 4.6.1 Xen Xen 4.6.3 Xen Xen 4.6.4 Xen Xen 4.6.5 Xen Xen 4.6.6 Xen Xen 4.7.0 Xen Xen 4.7.1 Xen Xen 4.7.2 Xen Xen 4.7.3 Xen Xen 4.8.0 Xen Xen 4.8.1

An issue exists in Xen 4.4.x up to and including 4.9.x allowing ARM guest OS users to cause a denial of service (prevent physical CPU usage) because of lock mishandling upon detection of an add-to-physmap error.

Xen Xen 4.4.0 Xen Xen 4.4.1 Xen Xen 4.4.2 Xen Xen 4.4.3 Xen Xen 4.4.4 Xen Xen 4.5.0 Xen Xen 4.5.1 Xen Xen 4.5.2 Xen Xen 4.5.3 Xen Xen 4.5.4 Xen Xen 4.5.5 Xen Xen 4.6.0

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook