CVE-2020-29568
Published Dec 15, 2020An issue was discovered in Xen through 4.14.x. Some OSes (such as Linux, FreeBSD, and NetBSD) are processing watch events using a single thread. If the events are received faster…
Vendor archive
xen CVEs
Beta · best-effort495 CVEs tagged to vendor xen — 15 Critical, 162 High, 267 Medium, 51 Low, 0 Unrated.
CVE-2020-29567
Published Dec 15, 2020An issue was discovered in Xen 4.14.x. When moving IRQs between CPUs to distribute the load of IRQ handling, IRQ vectors are dynamically allocated and de-allocated on the relevant…
CVE-2020-29566
Published Dec 15, 2020An issue was discovered in Xen through 4.14.x. When they require assistance from the device model, x86 HVM guests must be temporarily de-scheduled. The device model will signal Xe…
CVE-2020-29040
Published Nov 24, 2020An issue was discovered in Xen through 4.14.x allowing x86 HVM guest OS users to cause a denial of service (stack corruption), cause a data leak, or possibly gain privileges becau…
CVE-2020-28368
Published Nov 10, 2020Xen through 4.14.x allows guest OS administrators to obtain sensitive information (such as AES keys from outside the guest) via a side-channel attack on a power/energy monitoring…
CVE-2020-27674
Published Oct 22, 2020An issue was discovered in Xen through 4.14.x allowing x86 PV guest OS users to gain guest OS privileges by modifying kernel memory contents, because invalidation of TLB entries i…
CVE-2020-27673
Published Oct 22, 2020An issue was discovered in the Linux kernel through 5.9.1, as used with Xen through 4.14.x. Guest OS users can cause a denial of service (host OS hang) via a high rate of events t…
CVE-2020-27672
Published Oct 22, 2020An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a host OS denial of service, achieve data corruption, or possibly gain privileges by exploiting…
CVE-2020-27671
Published Oct 22, 2020An issue was discovered in Xen through 4.14.x allowing x86 HVM and PVH guest OS users to cause a denial of service (data corruption), cause a data leak, or possibly gain privilege…
CVE-2020-27670
Published Oct 22, 2020An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a denial of service (data corruption), cause a data leak, or possibly gain privileges because an…
CVE-2020-25604
Published Sep 23, 2020An issue was discovered in Xen through 4.14.x. There is a race condition when migrating timers between x86 HVM vCPUs. When migrating timers of x86 HVM guests between its vCPUs, th…
CVE-2020-25603
Published Sep 23, 2020An issue was discovered in Xen through 4.14.x. There are missing memory barriers when accessing/allocating an event channel. Event channels control structures can be accessed lock…
CVE-2020-25602
Published Sep 23, 2020An issue was discovered in Xen through 4.14.x. An x86 PV guest can trigger a host OS crash when handling guest access to MSR_MISC_ENABLE. When a guest accesses certain Model Speci…
CVE-2020-25601
Published Sep 23, 2020An issue was discovered in Xen through 4.14.x. There is a lack of preemption in evtchn_reset() / evtchn_destroy(). In particular, the FIFO event channel model allows guests to hav…
CVE-2020-25600
Published Sep 23, 2020An issue was discovered in Xen through 4.14.x. Out of bounds event channels are available to 32-bit x86 domains. The so called 2-level event channel model imposes different limits…
CVE-2020-25599
Published Sep 23, 2020An issue was discovered in Xen through 4.14.x. There are evtchn_reset() race conditions. Uses of EVTCHNOP_reset (potentially by a guest on itself) or XEN_DOMCTL_soft_reset (by its…
CVE-2020-25598
Published Sep 23, 2020An issue was discovered in Xen 4.14.x. There is a missing unlock in the XENMEM_acquire_resource error path. The RCU (Read, Copy, Update) mechanism is a synchronisation primitive.…
CVE-2020-25597
Published Sep 23, 2020An issue was discovered in Xen through 4.14.x. There is mishandling of the constraint that once-valid event channels may not turn invalid. Logic in the handling of event channel o…
CVE-2020-25596
Published Sep 23, 2020An issue was discovered in Xen through 4.14.x. x86 PV guest kernels can experience denial of service via SYSENTER. The SYSENTER instruction leaves various state sanitization activ…
CVE-2020-25595
Published Sep 23, 2020An issue was discovered in Xen through 4.14.x. The PCI passthrough code improperly uses register data. Code paths in Xen's MSI handling have been identified that act on unsanitize…
CVE-2020-15852
Published Jul 20, 2020An issue was discovered in the Linux kernel 5.5 through 5.7.9, as used in Xen through 4.13.x for x86 PV guests. An attacker may be granted the I/O port permissions of an unrelated…
CVE-2020-15567
Published Jul 7, 2020An issue was discovered in Xen through 4.13.x, allowing Intel guest OS users to gain privileges or cause a denial of service because of non-atomic modification of a live EPT PTE.…
CVE-2020-15566
Published Jul 7, 2020An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a host OS crash because of incorrect error handling in event-channel port allocation. The allocatio…
CVE-2020-15565
Published Jul 7, 2020An issue was discovered in Xen through 4.13.x, allowing x86 Intel HVM guest OS users to cause a host OS denial of service or possibly gain privileges because of insufficient cache…
CVE-2020-15564
Published Jul 7, 2020An issue was discovered in Xen through 4.13.x, allowing Arm guest OS users to cause a hypervisor crash because of a missing alignment check in VCPUOP_register_vcpu_info. The hyper…
Showing 151-175 of 495 CVEsPage 7 of 20