CVE-2022-23039
Published Mar 10, 2022Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to wh…
Vendor archive
xen CVEs
Beta · best-effort495 CVEs tagged to vendor xen — 15 Critical, 162 High, 267 Medium, 51 Low, 0 Unrated.
CVE-2022-23038
Published Mar 10, 2022Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to wh…
CVE-2022-23037
Published Mar 10, 2022Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to wh…
CVE-2022-23036
Published Mar 10, 2022Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to wh…
CVE-2022-23035
Published Jan 25, 2022Insufficient cleanup of passed-through device IRQs The management of IRQs associated with physical devices exposed to x86 HVM guests involves an iterative operation in particular…
CVE-2022-23034
Published Jan 25, 2022A PV guest could DoS Xen while unmapping a grant To address XSA-380, reference counting was introduced for grant mappings for the case where a PV guest would have the IOMMU enable…
CVE-2022-23033
Published Jan 25, 2022arm: guest_physmap_remove_page not removing the p2m mappings The functions to remove one or more entries from a guest p2m pagetable on Arm (p2m_remove_mapping, guest_physmap_remov…
CVE-2021-28713
Published Jan 5, 2022Rogue backends can cause DoS of guests via high frequency events T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond…
CVE-2021-28712
Published Jan 5, 2022Rogue backends can cause DoS of guests via high frequency events T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond…
CVE-2021-28711
Published Jan 5, 2022Rogue backends can cause DoS of guests via high frequency events T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond…
CVE-2021-28703
Published Dec 7, 2021grant table v2 status pages may remain accessible after de-allocation (take two) Guest get permitted access to certain Xen-owned pages of memory. The majority of such pages remain…
CVE-2021-28709
Published Nov 24, 2021issues with partially successful P2M updates on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.…
CVE-2021-28705
Published Nov 24, 2021issues with partially successful P2M updates on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.…
CVE-2021-28708
Published Nov 24, 2021PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] x86 HVM and PVH…
CVE-2021-28707
Published Nov 24, 2021PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] x86 HVM and PVH…
CVE-2021-28706
Published Nov 24, 2021guests may exceed their designated memory limit When a guest is permitted to have close to 16TiB of memory, it may be able to issue hypercalls to increase its memory allocation be…
CVE-2021-28704
Published Nov 24, 2021PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] x86 HVM and PVH…
CVE-2021-28710
Published Nov 21, 2021certain VT-d IOMMUs may not work in shared page table mode For efficiency reasons, address translation control structures (page tables) may (and, on suitable hardware, by default…
CVE-2021-28702
Published Oct 6, 2021PCI devices with RMRRs not deassigned correctly Certain PCI devices in a system might be assigned Reserved Memory Regions (specified via Reserved Memory Region Reporting, "RMRR").…
CVE-2021-28701
Published Sep 8, 2021Another race in XENMAPSPACE_grant_table handling Guests are permitted access to certain Xen-owned pages of memory. The majority of such pages remain allocated / associated with a…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2021-28700
Published Aug 27, 2021xen/arm: No memory limit for dom0less domUs The dom0less feature allows an administrator to create multiple unprivileged domains directly from Xen. Unfortunately, the memory limit…
CVE-2021-28699
Published Aug 27, 2021inadequate grant-v2 status frames array bounds check The v2 grant table interface separates grant attributes from grant status. That is, when operating in this mode, a guest has t…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2021-28698
Published Aug 27, 2021long running loops in grant table handling In order to properly monitor resource use, Xen maintains information on the grant mappings a domain may create to map grants offered by…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2021-28697
Published Aug 27, 2021grant table v2 status pages may remain accessible after de-allocation Guest get permitted access to certain Xen-owned pages of memory. The majority of such pages remain allocated…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2021-28696
Published Aug 27, 2021IOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Both AMD and Inte…
Showing 101-125 of 495 CVEsPage 5 of 20