| Max CVSS | 10.0 | Min CVSS | 5.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2017-10912 | 10.0 |
Xen through 4.8.x mishandles page transfer, which allows guest OS users to obtain privileged host OS access, aka XSA-217.
|
03-10-2019 - 00:03 | 05-07-2017 - 01:29 | |
| CVE-2017-10913 | 7.5 |
The grant-table feature in Xen through 4.8.x provides false mapping information in certain cases of concurrent unmap calls, which allows backend attackers to obtain sensitive information or gain privileges, aka XSA-218 bug 1.
|
03-10-2019 - 00:03 | 05-07-2017 - 01:29 | |
| CVE-2017-10920 | 10.0 |
The grant-table feature in Xen through 4.8.x mishandles a GNTMAP_device_map and GNTMAP_host_map mapping, when followed by only a GNTMAP_host_map unmapping, which allows guest OS users to cause a denial of service (count mismanagement and memory corru
|
03-10-2019 - 00:03 | 05-07-2017 - 01:29 | |
| CVE-2017-10921 | 10.0 |
The grant-table feature in Xen through 4.8.x does not ensure sufficient type counts for a GNTMAP_device_map and GNTMAP_host_map mapping, which allows guest OS users to cause a denial of service (count mismanagement and memory corruption) or obtain pr
|
03-10-2019 - 00:03 | 05-07-2017 - 01:29 | |
| CVE-2017-10915 | 6.8 |
The shadow-paging feature in Xen through 4.8.x mismanages page references and consequently introduces a race condition, which allows guest OS users to obtain Xen privileges, aka XSA-219.
|
04-11-2017 - 01:29 | 05-07-2017 - 01:29 | |
| CVE-2017-10922 | 5.0 |
The grant-table feature in Xen through 4.8.x mishandles MMIO region grant references, which allows guest OS users to cause a denial of service (loss of grant trackability), aka XSA-224 bug 3.
|
04-11-2017 - 01:29 | 05-07-2017 - 01:29 | |
| CVE-2017-10918 | 10.0 |
Xen through 4.8.x does not validate memory allocations during certain P2M operations, which allows guest OS users to obtain privileged host OS access, aka XSA-222.
|
04-11-2017 - 01:29 | 05-07-2017 - 01:29 | |
| CVE-2017-10914 | 6.8 |
The grant-table feature in Xen through 4.8.x has a race condition leading to a double free, which allows guest OS users to cause a denial of service (memory consumption), or possibly obtain sensitive information or gain privileges, aka XSA-218 bug 2.
|
04-11-2017 - 01:29 | 05-07-2017 - 01:29 |