Vulnerabilities > XEN > XEN > 4.10.0

DATE CVE VULNERABILITY TITLE RISK
2018-02-27 CVE-2018-7541 An issue was discovered in Xen through 4.10.x allowing guest OS users to cause a denial of service (hypervisor crash) or gain privileges by triggering a grant-table transition from v2 to v1.
local
low complexity
xen debian
6.1
2018-02-27 CVE-2018-7540 Resource Exhaustion vulnerability in multiple products
An issue was discovered in Xen through 4.10.x allowing x86 PV guest OS users to cause a denial of service (host OS CPU hang) via non-preemptable L3/L4 pagetable freeing.
local
low complexity
xen debian CWE-400
4.9
2018-01-05 CVE-2018-5244 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in XEN
In Xen 4.10, new infrastructure was introduced as part of an overhaul to how MSR emulation happens for guests.
local
low complexity
xen CWE-119
4.9