Vulnerabilities > XEN > Low
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2012-12-03 | CVE-2012-2934 | Local Denial of Service vulnerability in Xen 64-bit PV Guests Xen 4.0, and 4.1, when running a 64-bit PV guest on "older" AMD CPUs, does not properly protect against a certain AMD processor bug, which allows local guest OS users to cause a denial of service (host hang) via sequential execution of instructions across a non-canonical boundary, a different vulnerability than CVE-2012-0217. local xen | 1.9 |
| 2012-12-03 | CVE-2012-3432 | Permissions, Privileges, and Access Controls vulnerability in XEN The handle_mmio function in arch/x86/hvm/io.c in the MMIO operations emulator for Xen 3.3 and 4.x, when running an HVM guest, does not properly reset certain state information between emulation cycles, which allows local guest OS users to cause a denial of service (guest OS crash) via unspecified operations on MMIO regions. | 1.9 |
| 2012-11-23 | CVE-2012-3494 | Permissions, Privileges, and Access Controls vulnerability in multiple products The set_debugreg hypercall in include/asm-x86/debugreg.h in Xen 4.0, 4.1, and 4.2, and Citrix XenServer 6.0.2 and earlier, when running on x86-64 systems, allows local OS guest users to cause a denial of service (host crash) by writing to the reserved bits of the DR7 debug control register. | 2.1 |
| 2012-11-21 | CVE-2012-4535 | Resource Management Errors vulnerability in XEN Xen 3.4 through 4.2, and possibly earlier versions, allows local guest OS administrators to cause a denial of service (Xen infinite loop and physical CPU consumption) by setting a VCPU with an "inappropriate deadline." | 1.9 |
| 2012-11-21 | CVE-2012-4536 | Denial of Service vulnerability in XEN 2.2.0 The (1) domain_pirq_to_emuirq and (2) physdev_unmap_pirq functions in Xen 2.2 allows local guest OS administrators to cause a denial of service (Xen crash) via a crafted pirq value that triggers an out-of-bounds read. | 2.1 |
| 2012-11-21 | CVE-2012-4537 | Configuration vulnerability in XEN Xen 3.4 through 4.2, and possibly earlier versions, does not properly synchronize the p2m and m2p tables when the set_p2m_entry function fails, which allows local HVM guest OS administrators to cause a denial of service (memory consumption and assertion failure), aka "Memory mapping failure DoS vulnerability." | 2.1 |
| 2012-11-21 | CVE-2012-4539 | Resource Management Errors vulnerability in XEN Xen 4.0 through 4.2, when running 32-bit x86 PV guests on 64-bit hypervisors, allows local guest OS administrators to cause a denial of service (infinite loop and hang or crash) via invalid arguments to GNTTABOP_get_status_frames, aka "Grant table hypercall infinite loop DoS vulnerability." | 2.1 |
| 2012-10-31 | CVE-2012-2625 | Improper Input Validation vulnerability in XEN and Xen-Unstable The PyGrub boot loader in Xen unstable before changeset 25589:60f09d1ab1fe, 4.2.x, and 4.1.x allows local para-virtualized guest users to cause a denial of service (memory consumption) via a large (1) bzip2 or (2) lzma compressed kernel image. | 2.7 |
| 2012-10-31 | CVE-2012-4544 | Improper Input Validation vulnerability in XEN The PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk (1) before or (2) after decompression, which allows local guest administrators to cause a denial of service (domain 0 memory consumption) via a crafted (a) kernel or (b) ramdisk. | 2.1 |