Search for packages
| purl | pkg:deb/debian/xen@0?distro=trixie |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-1w8k-r3j4-8fbq | certain VT-d IOMMUs may not work in shared page table mode |
CVE-2021-28710
XSA-390 |
| VCID-3195-drgk-gkhx | input handling vulnerabilities loading guest kernel on ARM |
CVE-2014-3717
|
| VCID-3f57-by4f-77e4 | input handling vulnerabilities loading guest kernel on ARM |
CVE-2014-3715
|
| VCID-3q19-6ynd-6kb1 | nested virtualization on 32-bit exposes host crash |
CVE-2013-0151
|
| VCID-4428-3m75-93cx | insufficient permissions checks accessing guest memory on ARM |
CVE-2014-3969
|
| VCID-4ftz-k9rh-jubk | x86 shadow paging arbitrary pointer dereference |
CVE-2022-42335
XSA-430 |
| VCID-4xug-22db-7qg2 | Potential use of freed memory in event channel operations |
CVE-2013-1920
|
| VCID-5x39-ttxq-aygg | oxenstored incorrect handling of certain Xenbus ring states |
CVE-2013-0215
|
| VCID-6rf8-uz52-rqh6 | ocaml xenstored mishandles oversized message replies |
CVE-2013-4416
|
| VCID-ahxj-272k-gbfs | VT-d: Failure to quarantine devices in !HVM builds |
CVE-2023-46840
XSA-450 |
| VCID-bdx7-79cn-sud2 | integer overflow in several XSM/Flask hypercalls |
CVE-2014-1891
|
| VCID-bt3d-7y39-8fh6 | grant table entry swaps have inadequate bounds checking |
CVE-2012-3516
|
| VCID-cw5x-42j4-4yd2 | resolv.c in the DNS resolver in uIP, and dns.c in the DNS resolver in lwIP 1.4.1 and earlier, does not use random values for ID fields and source ports of DNS query packets, which makes it easier for man-in-the-middle attackers to conduct cache-poisoning attacks via spoofed reply packets. |
CVE-2014-4883
|
| VCID-dty8-26vq-yqbq | Nested HVM exposes host to being driven out of memory by guest |
CVE-2013-0152
|
| VCID-e5uy-33bq-3yb3 | ARM hypervisor crash on guest interrupt controller access |
CVE-2014-2986
|
| VCID-eaz5-1yjy-cybd | x86: unintended memory sharing between guests |
CVE-2022-42327
XSA-412 |
| VCID-j9gy-kfvu-4bat | Missing unlock in XENMEM_acquire_resource error path |
CVE-2020-25598
XSA-334 |
| VCID-k133-xqmd-vqhr | x86: Cross-Thread Return Address Predictions |
CVE-2022-27672
XSA-426 |
| VCID-mn7p-cz54-hqag | Guests can cause Xenstore crash via soft reset |
CVE-2022-42330
XSA-425 |
| VCID-mr8s-g8d8-euhb | Hypercalls exposed to privilege rings 1 and 2 of HVM guests |
CVE-2013-4554
|
| VCID-nwp3-9ygr-63gp | integer overflow in several XSM/Flask hypercalls |
CVE-2014-1893
|
| VCID-pqd6-dfhc-qfc3 | integer overflow in several XSM/Flask hypercalls |
CVE-2014-1894
|
| VCID-q3n8-1dzu-fkc4 | Hardware features unintentionally exposed to guests on ARM |
CVE-2014-2915
|
| VCID-qsma-2ufh-jybe | Xenstored DoS by unprivileged domain |
CVE-2026-23555
XSA-481 |
| VCID-r5th-7nku-tkgx | Hardware timer context is not properly context switched on ARM |
CVE-2014-3125
|
| VCID-rkkc-k39k-9yhn | input handling vulnerabilities loading guest kernel on ARM |
CVE-2014-3714
|
| VCID-s1nr-a4yy-vuaw | Hypervisor crash due to incorrect ASSERT (debug build only) |
CVE-2013-0154
|
| VCID-th6r-zg29-gfga | qemu-nbd format-guessing due to missing format specification |
CVE-2013-1922
|
| VCID-tstb-ymge-4bfk | information leak via gnttab_setup_table on ARM |
CVE-2014-4022
|
| VCID-uq3p-q3kj-f7au | x86: Mishandling of instruction pointer truncation during emulation |
CVE-2016-7093
XSA-186 |
| VCID-vmj3-kufn-skcw | several hypercalls do not validate input GFNs |
CVE-2012-5525
|
| VCID-w7xh-bzwe-pqah | arm: vgic-v2: GICD_SGIR is not properly emulated |
CVE-2015-0268
|
| VCID-wc2m-xbsh-xkb9 | kernel: xen: x86_emulate: fix SAHF emulation |
CVE-2011-2519
|
| VCID-wgmf-2zuh-z3fn | Xen <= 3.3 DoS due to incorrect virtual address validation |
CVE-2011-2901
|
| VCID-wkvy-3mr1-uuar | input handling vulnerabilities loading guest kernel on ARM |
CVE-2014-3716
|
| VCID-wq5x-ptkj-cyaz | Mishandling of guest SSBD selection on AMD hardware |
CVE-2022-42336
XSA-431 |
| VCID-wx6w-6y5m-fugn | Use after free of paging structures in EPT |
CVE-2026-23554
XSA-480 |
| VCID-yaee-q1df-aqgm | x86: memory leak with MSR emulation |
CVE-2018-5244
XSA-253 |
| VCID-ycvg-1w73-aqdj | integer overflow in several XSM/Flask hypercalls |
CVE-2014-1892
|