rpm package
opensuse/xen&distro=openSUSE Tumbleweed
pkg:rpm/opensuse/xen&distro=openSUSE%20Tumbleweed
Vulnerabilities (291)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2013-1922 | — | < 4.7.0_12-1.3 | 4.7.0_12-1.3 | May 13, 2013 | qemu-nbd in QEMU, as used in Xen 4.2.x, determines the format of a raw disk image based on the header, which allows local guest OS administrators to read arbitrary files on the host by modifying the header to identify a different format, which is used when the guest is restarted, | ||
| CVE-2013-1919 | — | < 4.7.0_12-1.3 | 4.7.0_12-1.3 | May 13, 2013 | Xen 4.2.x and 4.1.x does not properly restrict access to IRQs, which allows local stub domain clients to gain access to IRQs and cause a denial of service via vectors related to "passed-through IRQs or PCI devices." | ||
| CVE-2013-1918 | — | < 4.7.0_12-1.3 | 4.7.0_12-1.3 | May 13, 2013 | Certain page table manipulation operations in Xen 4.1.x, 4.2.x, and earlier are not preemptible, which allows local PV kernels to cause a denial of service via vectors related to "deep page table traversal." | ||
| CVE-2013-1917 | — | < 4.7.0_12-1.3 | 4.7.0_12-1.3 | May 13, 2013 | Xen 3.1 through 4.x, when running 64-bit hosts on Intel CPUs, does not clear the NT flag when using an IRET after a SYSENTER instruction, which allows PV guest users to cause a denial of service (hypervisor crash) by triggering a #GP fault, which is not properly handled by anothe | ||
| CVE-2013-0151 | — | < 4.7.0_12-1.3 | 4.7.0_12-1.3 | Mar 7, 2013 | The do_hvm_op function in xen/arch/x86/hvm/hvm.c in Xen 4.2.x on the x86_32 platform does not prevent HVM_PARAM_NESTEDHVM (aka nested virtualization) operations, which allows guest OS users to cause a denial of service (long-duration page mappings and host OS crash) by leveraging | ||
| CVE-2013-0153 | — | < 4.7.0_12-1.3 | 4.7.0_12-1.3 | Feb 14, 2013 | The AMD IOMMU support in Xen 4.2.x, 4.1.x, 3.3, and other versions, when using AMD-Vi for PCI passthrough, uses the same interrupt remapping table for the host and all guests, which allows guests to cause a denial of service by injecting an interrupt into other guests. | ||
| CVE-2012-5634 | — | < 4.7.0_12-1.3 | 4.7.0_12-1.3 | Feb 14, 2013 | Xen 4.2.x, 4.1.x, and 4.0, when using Intel VT-d for PCI passthrough, does not properly configure VT-d when supporting a device that is behind a legacy PCI Bridge, which allows local guests to cause a denial of service to other guests by injecting an interrupt. | ||
| CVE-2013-0152 | — | < 4.7.0_12-1.3 | 4.7.0_12-1.3 | Feb 13, 2013 | Memory leak in Xen 4.2 and unstable allows local HVM guests to cause a denial of service (host memory consumption) by performing nested virtualization in a way that triggers errors that are not properly handled. | ||
| CVE-2012-6075 | — | < 4.7.0_12-1.3 | 4.7.0_12-1.3 | Feb 13, 2013 | Buffer overflow in the e1000_receive function in the e1000 device driver (hw/e1000.c) in QEMU 1.3.0-rc2 and other versions, when the SBP and LPE flags are disabled, allows remote attackers to cause a denial of service (guest OS crash) and possibly execute arbitrary guest code via | ||
| CVE-2012-5525 | — | < 4.7.0_12-1.3 | 4.7.0_12-1.3 | Dec 13, 2012 | The get_page_from_gfn hypercall function in Xen 4.2 allows local PV guest OS administrators to cause a denial of service (crash) via a crafted GFN that triggers a buffer over-read. | ||
| CVE-2012-5515 | — | < 4.7.0_12-1.3 | 4.7.0_12-1.3 | Dec 13, 2012 | The (1) XENMEM_decrease_reservation, (2) XENMEM_populate_physmap, and (3) XENMEM_exchange hypercalls in Xen 4.2 and earlier allow local guest administrators to cause a denial of service (long loop and hang) via a crafted extent_order value. | ||
| CVE-2012-5514 | — | < 4.7.0_12-1.3 | 4.7.0_12-1.3 | Dec 13, 2012 | The guest_physmap_mark_populate_on_demand function in Xen 4.2 and earlier does not properly unlock the subject GFNs when checking if they are in use, which allows local guest HVM administrators to cause a denial of service (hang) via unspecified vectors. | ||
| CVE-2012-5513 | — | < 4.7.0_12-1.3 | 4.7.0_12-1.3 | Dec 13, 2012 | The XENMEM_exchange handler in Xen 4.2 and earlier does not properly check the memory address, which allows local PV guest OS administrators to cause a denial of service (crash) or possibly gain privileges via unspecified vectors that overwrite memory in the hypervisor reserved r | ||
| CVE-2012-5511 | — | < 4.7.0_12-1.3 | 4.7.0_12-1.3 | Dec 13, 2012 | Stack-based buffer overflow in the dirty video RAM tracking functionality in Xen 3.4 through 4.1 allows local HVM guest OS administrators to cause a denial of service (crash) via a large bitmap image. | ||
| CVE-2012-5510 | — | < 4.7.0_12-1.3 | 4.7.0_12-1.3 | Dec 13, 2012 | Xen 4.x, when downgrading the grant table version, does not properly remove the status page from the tracking list when freeing the page, which allows local guest OS administrators to cause a denial of service (hypervisor crash) via unspecified vectors. | ||
| CVE-2012-3432 | — | < 4.7.0_12-1.3 | 4.7.0_12-1.3 | Dec 3, 2012 | The handle_mmio function in arch/x86/hvm/io.c in the MMIO operations emulator for Xen 3.3 and 4.x, when running an HVM guest, does not properly reset certain state information between emulation cycles, which allows local guest OS users to cause a denial of service (guest OS crash | ||
| CVE-2012-4538 | — | < 4.7.0_12-1.3 | 4.7.0_12-1.3 | Nov 24, 2012 | The HVMOP_pagetable_dying hypercall in Xen 4.0, 4.1, and 4.2 does not properly check the pagetable state when running on shadow pagetables, which allows a local HVM guest OS to cause a denial of service (hypervisor crash) via unspecified vectors. | ||
| CVE-2012-3433 | — | < 4.7.0_12-1.3 | 4.7.0_12-1.3 | Nov 24, 2012 | Xen 4.0 and 4.1 allows local HVM guest OS kernels to cause a denial of service (domain 0 VCPU hang and kernel panic) by modifying the physical address space in a way that triggers excessive shared page search time during the p2m teardown. | ||
| CVE-2012-4411 | — | < 4.7.0_12-1.3 | 4.7.0_12-1.3 | Nov 23, 2012 | The graphical console in Xen 4.0, 4.1 and 4.2 allows local OS guest administrators to obtain sensitive host resource information via the qemu monitor. NOTE: this might be a duplicate of CVE-2007-0998. | ||
| CVE-2012-4539 | — | < 4.7.0_12-1.3 | 4.7.0_12-1.3 | Nov 21, 2012 | Xen 4.0 through 4.2, when running 32-bit x86 PV guests on 64-bit hypervisors, allows local guest OS administrators to cause a denial of service (infinite loop and hang or crash) via invalid arguments to GNTTABOP_get_status_frames, aka "Grant table hypercall infinite loop DoS vuln |
- CVE-2013-1922May 13, 2013affected < 4.7.0_12-1.3fixed 4.7.0_12-1.3
qemu-nbd in QEMU, as used in Xen 4.2.x, determines the format of a raw disk image based on the header, which allows local guest OS administrators to read arbitrary files on the host by modifying the header to identify a different format, which is used when the guest is restarted,
- CVE-2013-1919May 13, 2013affected < 4.7.0_12-1.3fixed 4.7.0_12-1.3
Xen 4.2.x and 4.1.x does not properly restrict access to IRQs, which allows local stub domain clients to gain access to IRQs and cause a denial of service via vectors related to "passed-through IRQs or PCI devices."
- CVE-2013-1918May 13, 2013affected < 4.7.0_12-1.3fixed 4.7.0_12-1.3
Certain page table manipulation operations in Xen 4.1.x, 4.2.x, and earlier are not preemptible, which allows local PV kernels to cause a denial of service via vectors related to "deep page table traversal."
- CVE-2013-1917May 13, 2013affected < 4.7.0_12-1.3fixed 4.7.0_12-1.3
Xen 3.1 through 4.x, when running 64-bit hosts on Intel CPUs, does not clear the NT flag when using an IRET after a SYSENTER instruction, which allows PV guest users to cause a denial of service (hypervisor crash) by triggering a #GP fault, which is not properly handled by anothe
- CVE-2013-0151Mar 7, 2013affected < 4.7.0_12-1.3fixed 4.7.0_12-1.3
The do_hvm_op function in xen/arch/x86/hvm/hvm.c in Xen 4.2.x on the x86_32 platform does not prevent HVM_PARAM_NESTEDHVM (aka nested virtualization) operations, which allows guest OS users to cause a denial of service (long-duration page mappings and host OS crash) by leveraging
- CVE-2013-0153Feb 14, 2013affected < 4.7.0_12-1.3fixed 4.7.0_12-1.3
The AMD IOMMU support in Xen 4.2.x, 4.1.x, 3.3, and other versions, when using AMD-Vi for PCI passthrough, uses the same interrupt remapping table for the host and all guests, which allows guests to cause a denial of service by injecting an interrupt into other guests.
- CVE-2012-5634Feb 14, 2013affected < 4.7.0_12-1.3fixed 4.7.0_12-1.3
Xen 4.2.x, 4.1.x, and 4.0, when using Intel VT-d for PCI passthrough, does not properly configure VT-d when supporting a device that is behind a legacy PCI Bridge, which allows local guests to cause a denial of service to other guests by injecting an interrupt.
- CVE-2013-0152Feb 13, 2013affected < 4.7.0_12-1.3fixed 4.7.0_12-1.3
Memory leak in Xen 4.2 and unstable allows local HVM guests to cause a denial of service (host memory consumption) by performing nested virtualization in a way that triggers errors that are not properly handled.
- CVE-2012-6075Feb 13, 2013affected < 4.7.0_12-1.3fixed 4.7.0_12-1.3
Buffer overflow in the e1000_receive function in the e1000 device driver (hw/e1000.c) in QEMU 1.3.0-rc2 and other versions, when the SBP and LPE flags are disabled, allows remote attackers to cause a denial of service (guest OS crash) and possibly execute arbitrary guest code via
- CVE-2012-5525Dec 13, 2012affected < 4.7.0_12-1.3fixed 4.7.0_12-1.3
The get_page_from_gfn hypercall function in Xen 4.2 allows local PV guest OS administrators to cause a denial of service (crash) via a crafted GFN that triggers a buffer over-read.
- CVE-2012-5515Dec 13, 2012affected < 4.7.0_12-1.3fixed 4.7.0_12-1.3
The (1) XENMEM_decrease_reservation, (2) XENMEM_populate_physmap, and (3) XENMEM_exchange hypercalls in Xen 4.2 and earlier allow local guest administrators to cause a denial of service (long loop and hang) via a crafted extent_order value.
- CVE-2012-5514Dec 13, 2012affected < 4.7.0_12-1.3fixed 4.7.0_12-1.3
The guest_physmap_mark_populate_on_demand function in Xen 4.2 and earlier does not properly unlock the subject GFNs when checking if they are in use, which allows local guest HVM administrators to cause a denial of service (hang) via unspecified vectors.
- CVE-2012-5513Dec 13, 2012affected < 4.7.0_12-1.3fixed 4.7.0_12-1.3
The XENMEM_exchange handler in Xen 4.2 and earlier does not properly check the memory address, which allows local PV guest OS administrators to cause a denial of service (crash) or possibly gain privileges via unspecified vectors that overwrite memory in the hypervisor reserved r
- CVE-2012-5511Dec 13, 2012affected < 4.7.0_12-1.3fixed 4.7.0_12-1.3
Stack-based buffer overflow in the dirty video RAM tracking functionality in Xen 3.4 through 4.1 allows local HVM guest OS administrators to cause a denial of service (crash) via a large bitmap image.
- CVE-2012-5510Dec 13, 2012affected < 4.7.0_12-1.3fixed 4.7.0_12-1.3
Xen 4.x, when downgrading the grant table version, does not properly remove the status page from the tracking list when freeing the page, which allows local guest OS administrators to cause a denial of service (hypervisor crash) via unspecified vectors.
- CVE-2012-3432Dec 3, 2012affected < 4.7.0_12-1.3fixed 4.7.0_12-1.3
The handle_mmio function in arch/x86/hvm/io.c in the MMIO operations emulator for Xen 3.3 and 4.x, when running an HVM guest, does not properly reset certain state information between emulation cycles, which allows local guest OS users to cause a denial of service (guest OS crash
- CVE-2012-4538Nov 24, 2012affected < 4.7.0_12-1.3fixed 4.7.0_12-1.3
The HVMOP_pagetable_dying hypercall in Xen 4.0, 4.1, and 4.2 does not properly check the pagetable state when running on shadow pagetables, which allows a local HVM guest OS to cause a denial of service (hypervisor crash) via unspecified vectors.
- CVE-2012-3433Nov 24, 2012affected < 4.7.0_12-1.3fixed 4.7.0_12-1.3
Xen 4.0 and 4.1 allows local HVM guest OS kernels to cause a denial of service (domain 0 VCPU hang and kernel panic) by modifying the physical address space in a way that triggers excessive shared page search time during the p2m teardown.
- CVE-2012-4411Nov 23, 2012affected < 4.7.0_12-1.3fixed 4.7.0_12-1.3
The graphical console in Xen 4.0, 4.1 and 4.2 allows local OS guest administrators to obtain sensitive host resource information via the qemu monitor. NOTE: this might be a duplicate of CVE-2007-0998.
- CVE-2012-4539Nov 21, 2012affected < 4.7.0_12-1.3fixed 4.7.0_12-1.3
Xen 4.0 through 4.2, when running 32-bit x86 PV guests on 64-bit hypervisors, allows local guest OS administrators to cause a denial of service (infinite loop and hang or crash) via invalid arguments to GNTTABOP_get_status_frames, aka "Grant table hypercall infinite loop DoS vuln
Page 14 of 15