| Max CVSS | 9.0 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2017-17566 | 6.9 |
An issue was discovered in Xen through 4.9.x allowing PV guest OS users to cause a denial of service (host OS crash) or gain host OS privileges in shadow mode by mapping a certain auxiliary page.
|
03-10-2019 - 00:03 | 12-12-2017 - 23:29 | |
| CVE-2017-15597 | 9.0 |
An issue was discovered in Xen through 4.9.x. Grant copying code made an implication that any grant pin would be accompanied by a suitable page reference. Other portions of code, however, did not match up with that assumption. When such a grant copy
|
03-10-2019 - 00:03 | 30-10-2017 - 14:29 | |
| CVE-2017-15590 | 4.6 |
An issue was discovered in Xen through 4.9.x allowing x86 guest OS users to cause a denial of service (hypervisor crash) or possibly gain privileges because MSI mapping was mishandled.
|
03-10-2019 - 00:03 | 18-10-2017 - 08:29 | |
| CVE-2018-10982 | 7.2 |
An issue was discovered in Xen through 4.10.x allowing x86 HVM guest OS users to cause a denial of service (unexpectedly high interrupt number, array overrun, and hypervisor crash) or possibly gain hypervisor privileges by setting up an HPET timer to
|
03-10-2019 - 00:03 | 10-05-2018 - 23:29 | |
| CVE-2017-14319 | 7.2 |
A grant unmapping issue was discovered in Xen through 4.9.x. When removing or replacing a grant mapping, the x86 PV specific path needs to make sure page table entries remain in sync with other accounting done. Although the identity of the page frame
|
03-10-2019 - 00:03 | 12-09-2017 - 15:29 | |
| CVE-2018-10471 | 4.9 |
An issue was discovered in Xen through 4.10.x allowing x86 PV guest OS users to cause a denial of service (out-of-bounds zero write and hypervisor crash) via unexpected INT 80 processing, because of an incorrect fix for CVE-2017-5754.
|
31-10-2018 - 10:30 | 27-04-2018 - 15:29 | |
| CVE-2017-17565 | 4.7 |
An issue was discovered in Xen through 4.9.x allowing PV guest OS users to cause a denial of service (host OS crash) if shadow mode and log-dirty mode are in place, because of an incorrect assertion related to M2P.
|
19-10-2018 - 10:29 | 12-12-2017 - 23:29 | |
| CVE-2017-17563 | 6.9 |
An issue was discovered in Xen through 4.9.x allowing guest OS users to cause a denial of service (host OS crash) or gain host OS privileges by leveraging an incorrect mask for reference-count overflow checking in shadow mode.
|
19-10-2018 - 10:29 | 12-12-2017 - 23:29 | |
| CVE-2017-17564 | 6.9 |
An issue was discovered in Xen through 4.9.x allowing guest OS users to cause a denial of service (host OS crash) or gain host OS privileges by leveraging incorrect error handling for reference counting in shadow mode.
|
19-10-2018 - 10:29 | 12-12-2017 - 23:29 | |
| CVE-2017-14317 | 4.7 |
A domain cleanup issue was discovered in the C xenstore daemon (aka cxenstored) in Xen through 4.9.x. When shutting down a VM with a stubdomain, a race in cxenstored may cause a double-free. The xenstored daemon may crash, resulting in a DoS of any p
|
19-10-2018 - 10:29 | 12-09-2017 - 15:29 | |
| CVE-2017-15588 | 6.9 |
An issue was discovered in Xen through 4.9.x allowing x86 PV guest OS users to execute arbitrary code on the host OS because of a race condition that can cause a stale TLB entry.
|
19-10-2018 - 10:29 | 18-10-2017 - 08:29 | |
| CVE-2017-17046 | 2.1 |
An issue was discovered in Xen through 4.9.x on the ARM platform allowing guest OS users to obtain sensitive information from DRAM after a reboot, because disjoint blocks, and physical addresses that do not start at zero, are mishandled.
|
19-10-2018 - 10:29 | 28-11-2017 - 23:29 | |
| CVE-2017-14316 | 7.2 |
A parameter verification issue was discovered in Xen through 4.9.x. The function `alloc_heap_pages` allows callers to specify the first NUMA node that should be used for allocations through the `memflags` parameter; the node is extracted using the `M
|
19-10-2018 - 10:29 | 12-09-2017 - 15:29 | |
| CVE-2017-15589 | 2.1 |
An issue was discovered in Xen through 4.9.x allowing x86 HVM guest OS users to obtain sensitive information from the host OS (or an arbitrary guest OS) because intercepted I/O operations can cause a write of data from uninitialized hypervisor stack
|
19-10-2018 - 10:29 | 18-10-2017 - 08:29 |