CVE List

Id CVE No. Status Description Phase Votes Comments Actions
64303  CVE-2013-4356  Candidate  Xen 4.3.x writes hypervisor mappings to certain shadow pagetables when live migration is performed on hosts with more than 5TB of RAM, which allows local 64-bit PV guests to read or write to invalid memory and cause a denial of service (crash).  Assigned (20130612)  None (candidate not yet proposed)    View
80028  CVE-2015-2751  Candidate  Xen 4.3.x, 4.4.x, and 4.5.x, when using toolstack disaggregation, allows remote domains with partial management control to cause a denial of service (host lock) via unspecified domctl operations.  Assigned (20150326)  None (candidate not yet proposed)    View
76367  CVE-2014-9066  Candidate  Xen 4.4.x and earlier, when using a large number of VCPUs, does not properly handle read and write locks, which allows local x86 guest users to cause a denial of service (write denial or NMI watchdog timeout and host crash) via a large number of read requests, a different vulnerability than CVE-2014-9065.  Assigned (20141124)  None (candidate not yet proposed)    View
71012  CVE-2014-3716  Candidate  Xen 4.4.x does not properly check alignment, which allows local users to cause a denial of service (crash) via an unspecified field in a DTB header in a 32-bit guest kernel.  Assigned (20140514)  None (candidate not yet proposed)    View
71013  CVE-2014-3717  Candidate  Xen 4.4.x does not properly validate the load address for 64-bit ARM guest kernels, which allows local users to read system memory or cause a denial of service (crash) via a crafted kernel, which triggers a buffer overflow.  Assigned (20140514)  None (candidate not yet proposed)    View

Page 20842 of 20943, showing 5 records out of 104715 total, starting on record 104206, ending on 104210

Actions