CVE List

Id CVE No. Status Description Phase Votes Comments Actions
96197  CVE-2016-9377  Candidate  Xen 4.5.x through 4.7.x on AMD systems without the NRip feature, when emulating instructions that generate software interrupts, allows local HVM guest OS users to cause a denial of service (guest crash) by leveraging IDT entry miscalculation.  Assigned (20161117)  None (candidate not yet proposed)    View
89089  CVE-2016-2270  Candidate  Xen 4.6.x and earlier allows local guest administrators to cause a denial of service (host reboot) via vectors related to multiple mappings of MMIO pages with different cachability settings.  Assigned (20160209)  None (candidate not yet proposed)    View
85615  CVE-2015-8338  Candidate  Xen 4.6.x and earlier does not properly enforce limits on page order inputs for the (1) XENMEM_increase_reservation, (2) XENMEM_populate_physmap, (3) XENMEM_exchange, and possibly other HYPERVISOR_memory_op suboperations, which allows ARM guest OS administrators to cause a denial of service (CPU consumption, guest reboot, or watchdog timeout and host reboot) and possibly have unspecified other impact via unknown vectors.  Assigned (20151125)  None (candidate not yet proposed)    View
85832  CVE-2015-8555  Candidate  Xen 4.6.x, 4.5.x, 4.4.x, 4.3.x, and earlier do not initialize x86 FPU stack and XMM registers when XSAVE/XRSTOR are not used to manage guest extended register state, which allows local guest domains to obtain sensitive information from other domains via unspecified vectors.  Assigned (20151214)  None (candidate not yet proposed)    View
96204  CVE-2016-9384  Candidate  Xen 4.7 allows local guest OS users to obtain sensitive host information by loading a 32-bit ELF symbol table.  Assigned (20161117)  None (candidate not yet proposed)    View

Page 20845 of 20943, showing 5 records out of 104715 total, starting on record 104221, ending on 104225

Actions