Vulnerabilities > XEN > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2013-02-14 | CVE-2013-0153 | Local Denial of Service vulnerability in Xen AMD IOMMU The AMD IOMMU support in Xen 4.2.x, 4.1.x, 3.3, and other versions, when using AMD-Vi for PCI passthrough, uses the same interrupt remapping table for the host and all guests, which allows guests to cause a denial of service by injecting an interrupt into other guests. local xen | 4.7 |
| 2013-02-14 | CVE-2012-5634 | Configuration vulnerability in XEN Xen 4.2.x, 4.1.x, and 4.0, when using Intel VT-d for PCI passthrough, does not properly configure VT-d when supporting a device that is behind a legacy PCI Bridge, which allows local guests to cause a denial of service to other guests by injecting an interrupt. | 6.1 |
| 2013-02-13 | CVE-2013-0231 | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in multiple products The pciback_enable_msi function in the PCI backend driver (drivers/xen/pciback/conf_space_capability_msi.c) in Xen for the Linux kernel 2.6.18 and 3.8 allows guest OS users with PCI device access to cause a denial of service via a large number of kernel log messages. | 4.9 |
| 2013-02-13 | CVE-2013-0152 | Resource Management Errors vulnerability in XEN 4.2.0 Memory leak in Xen 4.2 and unstable allows local HVM guests to cause a denial of service (host memory consumption) by performing nested virtualization in a way that triggers errors that are not properly handled. | 4.7 |
| 2012-12-13 | CVE-2012-6333 | Resource Management Errors vulnerability in XEN Multiple HVM control operations in Xen 3.4 through 4.2 allow local HVM guest OS administrators to cause a denial of service (physical CPU consumption) via a large input. | 4.7 |
| 2012-12-13 | CVE-2012-5525 | Local Denial of Service vulnerability in XEN 4.2.0 The get_page_from_gfn hypercall function in Xen 4.2 allows local PV guest OS administrators to cause a denial of service (crash) via a crafted GFN that triggers a buffer over-read. local xen | 4.7 |
| 2012-12-13 | CVE-2012-5515 | Local Denial of Service vulnerability in Xen 'extent_order' Values The (1) XENMEM_decrease_reservation, (2) XENMEM_populate_physmap, and (3) XENMEM_exchange hypercalls in Xen 4.2 and earlier allow local guest administrators to cause a denial of service (long loop and hang) via a crafted extent_order value. local xen | 4.7 |
| 2012-12-13 | CVE-2012-5514 | Local Denial of Service vulnerability in Xen The guest_physmap_mark_populate_on_demand function in Xen 4.2 and earlier does not properly unlock the subject GFNs when checking if they are in use, which allows local guest HVM administrators to cause a denial of service (hang) via unspecified vectors. local xen | 4.7 |
| 2012-12-13 | CVE-2012-5511 | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in XEN Stack-based buffer overflow in the dirty video RAM tracking functionality in Xen 3.4 through 4.1 allows local HVM guest OS administrators to cause a denial of service (crash) via a large bitmap image. | 4.7 |
| 2012-12-13 | CVE-2012-5510 | Local Denial of Service vulnerability in Xen Grant Table Xen 4.x, when downgrading the grant table version, does not properly remove the status page from the tracking list when freeing the page, which allows local guest OS administrators to cause a denial of service (hypervisor crash) via unspecified vectors. local xen | 4.7 |