Vulnerabilities > XEN > XEN
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2013-05-13 | CVE-2013-1922 | Permissions, Privileges, and Access Controls vulnerability in XEN 4.2.0/4.2.1/4.2.2 qemu-nbd in QEMU, as used in Xen 4.2.x, determines the format of a raw disk image based on the header, which allows local guest OS administrators to read arbitrary files on the host by modifying the header to identify a different format, which is used when the guest is restarted, a different vulnerability than CVE-2008-2004. | 3.3 |
| 2013-05-13 | CVE-2013-1919 | Permissions, Privileges, and Access Controls vulnerability in XEN Xen 4.2.x and 4.1.x does not properly restrict access to IRQs, which allows local stub domain clients to gain access to IRQs and cause a denial of service via vectors related to "passed-through IRQs or PCI devices." | 4.7 |
| 2013-05-13 | CVE-2013-1918 | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in XEN Certain page table manipulation operations in Xen 4.1.x, 4.2.x, and earlier are not preemptible, which allows local PV kernels to cause a denial of service via vectors related to "deep page table traversal." | 4.7 |
| 2013-05-13 | CVE-2013-1917 | Improper Input Validation vulnerability in XEN Xen 3.1 through 4.x, when running 64-bit hosts on Intel CPUs, does not clear the NT flag when using an IRET after a SYSENTER instruction, which allows PV guest users to cause a denial of service (hypervisor crash) by triggering a #GP fault, which is not properly handled by another IRET instruction. | 1.9 |
| 2013-04-12 | CVE-2013-1920 | Permissions, Privileges, and Access Controls vulnerability in XEN Xen 4.2.x, 4.1.x, and earlier, when the hypervisor is running "under memory pressure" and the Xen Security Module (XSM) is enabled, uses the wrong ordering of operations when extending the per-domain event channel tracking table, which causes a use-after-free and allows local guest kernels to inject arbitrary events and gain privileges via unspecified vectors. | 4.4 |
| 2013-02-14 | CVE-2013-0153 | Local Denial of Service vulnerability in Xen AMD IOMMU The AMD IOMMU support in Xen 4.2.x, 4.1.x, 3.3, and other versions, when using AMD-Vi for PCI passthrough, uses the same interrupt remapping table for the host and all guests, which allows guests to cause a denial of service by injecting an interrupt into other guests. local xen | 4.7 |
| 2013-02-14 | CVE-2012-5634 | Configuration vulnerability in XEN Xen 4.2.x, 4.1.x, and 4.0, when using Intel VT-d for PCI passthrough, does not properly configure VT-d when supporting a device that is behind a legacy PCI Bridge, which allows local guests to cause a denial of service to other guests by injecting an interrupt. | 6.1 |
| 2013-02-13 | CVE-2013-0231 | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in multiple products The pciback_enable_msi function in the PCI backend driver (drivers/xen/pciback/conf_space_capability_msi.c) in Xen for the Linux kernel 2.6.18 and 3.8 allows guest OS users with PCI device access to cause a denial of service via a large number of kernel log messages. | 4.9 |
| 2013-02-13 | CVE-2013-0152 | Resource Management Errors vulnerability in XEN 4.2.0 Memory leak in Xen 4.2 and unstable allows local HVM guests to cause a denial of service (host memory consumption) by performing nested virtualization in a way that triggers errors that are not properly handled. | 4.7 |
| 2013-01-12 | CVE-2013-0154 | Local Denial Of Service vulnerability in XEN 4.2.0 The get_page_type function in xen/arch/x86/mm.c in Xen 4.2, when debugging is enabled, allows local PV or HVM guest administrators to cause a denial of service (assertion failure and hypervisor crash) via unspecified vectors related to a hypercall. local xen | 1.9 |