Search for packages
| purl | pkg:deb/debian/xen@4.8.5.final%2Bshim4.10.4-1%2Bdeb9u12 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 10.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-1phh-s2rg-4ugh
Aliases: CVE-2018-19963 XSA-276 |
resource accounting issues in x86 IOREQ server handling |
Affected by 96 other vulnerabilities. |
|
VCID-1wgc-r96w-7kg9
Aliases: CVE-2021-3308 XSA-360 |
IRQ vector leak on x86 |
Affected by 45 other vulnerabilities. |
|
VCID-1wtd-67ef-1qej
Aliases: CVE-2021-28695 |
IOMMU page mapping issues on x86 |
Affected by 45 other vulnerabilities. |
|
VCID-1x3w-n7ms-eqeh
Aliases: CVE-2020-29485 XSA-330 |
oxenstored memory leak in reset_watches |
Affected by 96 other vulnerabilities. Affected by 45 other vulnerabilities. |
|
VCID-28t2-hng7-tfe5
Aliases: CVE-2021-27379 |
missed flush in XSA-321 backport |
Affected by 96 other vulnerabilities. Affected by 45 other vulnerabilities. |
|
VCID-2ke1-fmf7-7ydt
Aliases: CVE-2019-18424 XSA-302 |
passed through PCI devices may corrupt host memory after deassignment |
Affected by 96 other vulnerabilities. |
|
VCID-2n9p-6t7s-kqc5
Aliases: CVE-2021-26933 XSA-364 |
arm: The cache may not be cleaned for newly allocated scrubbed pages |
Affected by 96 other vulnerabilities. Affected by 45 other vulnerabilities. |
|
VCID-2uap-2vm1-efcr
Aliases: CVE-2022-29900 |
Retbleed - arbitrary speculative code execution with return instructions |
Affected by 45 other vulnerabilities. |
|
VCID-2yke-a3ka-ubaq
Aliases: CVE-2019-19579 XSA-306 |
Device quarantine for alternate pci assignment methods |
Affected by 96 other vulnerabilities. |
|
VCID-32w3-vmcb-wfd9
Aliases: CVE-2021-28693 XSA-372 |
xen/arm: Boot modules are not scrubbed |
Affected by 45 other vulnerabilities. |
|
VCID-3488-1xdv-4kc8
Aliases: CVE-2019-19580 XSA-310 |
Further issues with restartable PV type change operations |
Affected by 96 other vulnerabilities. |
|
VCID-34gr-dtsz-1fab
Aliases: CVE-2020-27672 XSA-345 |
x86: Race condition in Xen mapping code |
Affected by 96 other vulnerabilities. Affected by 45 other vulnerabilities. |
|
VCID-34ng-ftbx-e3cm
Aliases: CVE-2022-42317 |
Xenstore: guests can let run xenstored out of memory |
Affected by 45 other vulnerabilities. |
|
VCID-39t8-p1q7-eyag
Aliases: CVE-2022-42318 |
Xenstore: guests can let run xenstored out of memory |
Affected by 45 other vulnerabilities. |
|
VCID-3d53-4qtr-myhm
Aliases: CVE-2022-42332 XSA-427 |
x86 shadow plus log-dirty mode use-after-free |
Affected by 45 other vulnerabilities. |
|
VCID-3pxf-xndw-5fft
Aliases: CVE-2020-29484 XSA-324 |
Xenstore: guests can crash xenstored via watchs |
Affected by 96 other vulnerabilities. Affected by 45 other vulnerabilities. |
|
VCID-3pzv-55sc-37ge
Aliases: CVE-2019-19577 XSA-311 |
Bugs in dynamic height handling for AMD IOMMU pagetables |
Affected by 96 other vulnerabilities. |
|
VCID-3qjm-4egs-1kax
Aliases: CVE-2019-18421 XSA-299 |
Issues with restartable PV type change operations |
Affected by 96 other vulnerabilities. |
|
VCID-3tjz-1jvw-8uc4
Aliases: CVE-2020-15565 XSA-321 |
insufficient cache write-back under VT-d |
Affected by 96 other vulnerabilities. |
|
VCID-3whm-8fyv-zyhd
Aliases: CVE-2020-25604 XSA-336 |
race when migrating timers between x86 HVM vCPU-s |
Affected by 96 other vulnerabilities. Affected by 45 other vulnerabilities. |
|
VCID-416b-93m6-jyby
Aliases: CVE-2022-42313 |
Xenstore: guests can let run xenstored out of memory |
Affected by 45 other vulnerabilities. |
|
VCID-42ma-8ash-j7c8
Aliases: CVE-2022-42311 |
Xenstore: guests can let run xenstored out of memory |
Affected by 45 other vulnerabilities. |
|
VCID-4429-qf2w-jqg3
Aliases: CVE-2022-21166 XSA-404 |
x86: MMIO Stale Data vulnerabilities |
Affected by 45 other vulnerabilities. |
|
VCID-493n-hphq-akhy
Aliases: CVE-2020-15567 XSA-328 |
non-atomic modification of live EPT PTE |
Affected by 96 other vulnerabilities. |
|
VCID-4spa-usqt-93b2
Aliases: CVE-2022-26362 XSA-401 |
x86 pv: Race condition in typeref acquisition |
Affected by 45 other vulnerabilities. |
|
VCID-5cw7-rv5f-jfaq
Aliases: CVE-2022-33745 XSA-408 |
insufficient TLB flush for x86 PV guests in shadow mode |
Affected by 45 other vulnerabilities. |
|
VCID-5dbd-kz24-6fc1
Aliases: CVE-2021-28709 XSA-389 |
issues with partially successful P2M updates on x86 |
Affected by 45 other vulnerabilities. |
|
VCID-61zz-uk19-r7b2
Aliases: CVE-2019-17343 |
x86: Inconsistent PV IOMMU discipline |
Affected by 96 other vulnerabilities. |
|
VCID-64mf-wa98-rkha
Aliases: CVE-2018-19964 XSA-277 |
x86: incorrect error handling for guest p2m page removals |
Affected by 96 other vulnerabilities. |
|
VCID-6b1e-39na-b7gf
Aliases: CVE-2018-19967 XSA-282 |
guest use of HLE constructs may lock up host |
Affected by 96 other vulnerabilities. |
|
VCID-6jsn-7538-a7ha
Aliases: CVE-2018-3646 XSA-273 |
L1 Terminal Fault speculative side channel |
Affected by 96 other vulnerabilities. |
|
VCID-6kh6-edk7-xkcc
Aliases: CVE-2020-27670 XSA-347 |
unsafe AMD IOMMU page table updates |
Affected by 96 other vulnerabilities. Affected by 45 other vulnerabilities. |
|
VCID-6vxj-m9ud-5ke9
Aliases: CVE-2019-17350 |
Unlimited Arm Atomics Operations |
Affected by 96 other vulnerabilities. |
|
VCID-6xbp-t4qh-tbhv
Aliases: CVE-2022-42312 XSA-326 |
Xenstore: guests can let run xenstored out of memory |
Affected by 45 other vulnerabilities. |
|
VCID-77st-3475-5kdr
Aliases: CVE-2021-28687 XSA-368 |
HVM soft-reset crashes toolstack |
Affected by 45 other vulnerabilities. |
|
VCID-7d5b-66n7-zbe1
Aliases: CVE-2022-42333 CVE-2022-43334 XSA-428 |
x86/HVM pinned cache attributes mis-handling |
Affected by 45 other vulnerabilities. |
|
VCID-7ek3-weqx-9fhs
Aliases: CVE-2022-23824 XSA-422 |
x86: Multiple speculative security issues |
Affected by 45 other vulnerabilities. |
|
VCID-7etc-u5ya-zued
Aliases: CVE-2022-26358 |
IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues |
Affected by 45 other vulnerabilities. |
|
VCID-7ghz-5whc-u3ee
Aliases: CVE-2019-19582 XSA-307 |
find_next_bit() issues |
Affected by 96 other vulnerabilities. |
|
VCID-7t5h-jy8h-t3d4
Aliases: CVE-2022-42323 |
Xenstore: Cooperating guests can create arbitrary numbers of nodes |
Affected by 45 other vulnerabilities. |
|
VCID-7vn6-5h93-27hn
Aliases: CVE-2018-3620 |
L1 Terminal Fault speculative side channel |
Affected by 96 other vulnerabilities. |
|
VCID-7wyt-uh2c-a3ha
Aliases: CVE-2022-26363 |
x86 pv: Insufficient care with non-coherent mappings |
Affected by 45 other vulnerabilities. |
|
VCID-7ysh-usku-c3dz
Aliases: CVE-2022-42334 |
x86/HVM pinned cache attributes mis-handling |
Affected by 45 other vulnerabilities. |
|
VCID-7zpj-3par-s3b5
Aliases: CVE-2022-42316 |
Xenstore: guests can let run xenstored out of memory |
Affected by 45 other vulnerabilities. |
|
VCID-85jp-mmaq-n7ck
Aliases: CVE-2019-17346 |
x86: insufficient TLB flushing when using PCID |
Affected by 96 other vulnerabilities. |
|
VCID-87tq-2me2-d3bb
Aliases: CVE-2022-42314 |
Xenstore: guests can let run xenstored out of memory |
Affected by 45 other vulnerabilities. |
|
VCID-898q-dzb7-3qe7
Aliases: CVE-2019-17344 |
missing preemption in x86 PV page table unvalidation |
Affected by 96 other vulnerabilities. |
|
VCID-8cb8-vq2c-q3e9
Aliases: CVE-2022-42309 XSA-414 |
Xenstore: Guests can crash xenstored |
Affected by 45 other vulnerabilities. |
|
VCID-8r8y-8bq2-jufj
Aliases: CVE-2020-29479 XSA-353 |
oxenstored: permissions not checked on root node |
Affected by 96 other vulnerabilities. Affected by 45 other vulnerabilities. |
|
VCID-91hk-73kq-83g6
Aliases: CVE-2022-33748 XSA-411 |
lock order inversion in transitive grant copy handling |
Affected by 45 other vulnerabilities. |
|
VCID-9ed4-5mca-kfdv
Aliases: CVE-2019-17342 |
x86: steal_page violates page_struct access discipline |
Affected by 96 other vulnerabilities. |
|
VCID-9hr5-p18q-7qb8
Aliases: CVE-2020-29571 XSA-359 |
FIFO event channels control structure ordering |
Affected by 96 other vulnerabilities. Affected by 45 other vulnerabilities. |
|
VCID-9s43-gewn-bycc
Aliases: CVE-2021-28703 XSA-387 |
grant table v2 status pages may remain accessible after de-allocation (take two) |
Affected by 45 other vulnerabilities. |
|
VCID-9yut-bdsw-gkfy
Aliases: CVE-2018-12127 |
Microarchitectural Data Sampling speculative side channel |
Affected by 96 other vulnerabilities. |
|
VCID-9zqd-3x84-43gc
Aliases: CVE-2022-23033 XSA-393 |
arm: guest_physmap_remove_page not removing the p2m mappings |
Affected by 45 other vulnerabilities. |
|
VCID-a3by-shse-q3fr
Aliases: CVE-2020-11740 |
multiple xenoprof issues |
Affected by 96 other vulnerabilities. |
|
VCID-an7r-pjrv-pyde
Aliases: CVE-2018-19966 XSA-280 |
Fix for XSA-240 conflicts with shadow paging |
Affected by 96 other vulnerabilities. |
|
VCID-aw3c-9db1-a7eh
Aliases: CVE-2019-18422 XSA-303 |
ARM: Interrupts are unconditionally unmasked in exception handlers |
Affected by 96 other vulnerabilities. |
|
VCID-az8d-xrb4-3ug4
Aliases: CVE-2021-28701 XSA-384 |
Another race in XENMAPSPACE_grant_table handling |
Affected by 45 other vulnerabilities. |
|
VCID-b7tb-ns1t-fyaw
Aliases: CVE-2022-26361 |
IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues |
Affected by 45 other vulnerabilities. |
|
VCID-bc6f-wu8g-5yb4
Aliases: CVE-2020-29483 XSA-325 |
Xenstore: guests can disturb domain cleanup |
Affected by 96 other vulnerabilities. Affected by 45 other vulnerabilities. |
|
VCID-bd46-xyhc-8uf5
Aliases: CVE-2019-18425 XSA-298 |
missing descriptor table limit checking in x86 PV emulation |
Affected by 96 other vulnerabilities. |
|
VCID-bs56-1z79-uqbt
Aliases: CVE-2020-25596 XSA-339 |
x86 pv guest kernel DoS via SYSENTER |
Affected by 96 other vulnerabilities. Affected by 45 other vulnerabilities. |
|
VCID-bxae-85uh-uyek
Aliases: CVE-2021-28708 |
PoD operations on misaligned GFNs |
Affected by 45 other vulnerabilities. |
|
VCID-bxb7-7gpw-qybb
Aliases: CVE-2022-42315 |
Xenstore: guests can let run xenstored out of memory |
Affected by 45 other vulnerabilities. |
|
VCID-bzve-5gwu-8ydb
Aliases: CVE-2020-25602 XSA-333 |
x86 pv: Crash when handling guest access to MSR_MISC_ENABLE |
Affected by 96 other vulnerabilities. Affected by 45 other vulnerabilities. |
|
VCID-cbtr-g13y-tbhz
Aliases: CVE-2019-17349 |
Unlimited Arm Atomics Operations |
Affected by 96 other vulnerabilities. |
|
VCID-csy7-esn4-u3gq
Aliases: CVE-2022-21123 |
x86: MMIO Stale Data vulnerabilities |
Affected by 45 other vulnerabilities. |
|
VCID-cuab-yybg-6uhs
Aliases: CVE-2018-15469 XSA-268 |
Use of v2 grant tables may cause crash on ARM |
Affected by 96 other vulnerabilities. |
|
VCID-d3ad-6tme-bfem
Aliases: CVE-2020-29486 XSA-352 |
oxenstored: node ownership can be changed by unprivileged clients |
Affected by 96 other vulnerabilities. Affected by 45 other vulnerabilities. |
|
VCID-dfjm-gwzm-jqbt
Aliases: CVE-2022-42324 XSA-420 |
Oxenstored 32->31 bit integer truncation issues |
Affected by 45 other vulnerabilities. |
|
VCID-dgm4-ye4m-1fcq
Aliases: CVE-2022-42320 XSA-417 |
Xenstore: Guests can get access to Xenstore nodes of deleted domains |
Affected by 45 other vulnerabilities. |
|
VCID-dj1v-h79p-9ydz
Aliases: CVE-2022-26356 XSA-397 |
Racy interactions between dirty vram tracking and paging log dirty hypercalls |
Affected by 45 other vulnerabilities. |
|
VCID-dqy9-zkvw-e3gk
Aliases: CVE-2020-25601 XSA-344 |
lack of preemption in evtchn_reset() / evtchn_destroy() |
Affected by 96 other vulnerabilities. Affected by 45 other vulnerabilities. |
|
VCID-drhd-ytb7-u3em
Aliases: CVE-2020-29481 XSA-322 |
Xenstore: new domains inheriting existing node permissions |
Affected by 96 other vulnerabilities. Affected by 45 other vulnerabilities. |
|
VCID-e96u-uwba-kfg5
Aliases: CVE-2021-26313 |
Speculative Code Store Bypass |
Affected by 96 other vulnerabilities. Affected by 45 other vulnerabilities. |
|
VCID-eb8v-p31a-yuhu
Aliases: CVE-2020-25597 XSA-338 |
once valid event channels may not turn invalid |
Affected by 96 other vulnerabilities. Affected by 45 other vulnerabilities. |
|
VCID-eka3-u8e5-3uad
Aliases: CVE-2020-27671 XSA-346 |
undue deferral of IOMMU TLB flushes |
Affected by 96 other vulnerabilities. Affected by 45 other vulnerabilities. |
|
VCID-ep7n-um5m-ekgk
Aliases: CVE-2020-25595 XSA-337 |
PCI passthrough code reading back hardware registers |
Affected by 96 other vulnerabilities. Affected by 45 other vulnerabilities. |
|
VCID-favj-4du1-qqe8
Aliases: CVE-2019-18420 |
VCPUOP_initialise DoS |
Affected by 96 other vulnerabilities. |
|
VCID-fekb-fbhz-y7g7
Aliases: CVE-2021-28704 XSA-388 |
PoD operations on misaligned GFNs |
Affected by 45 other vulnerabilities. |
|
VCID-fhbs-3nvf-tbha
Aliases: CVE-2022-33747 XSA-409 |
Arm: unbounded memory consumption for 2nd-level page tables |
Affected by 45 other vulnerabilities. |
|
VCID-fqt9-2esb-ffan
Aliases: CVE-2021-28702 XSA-386 |
PCI devices with RMRRs not deassigned correctly |
Affected by 45 other vulnerabilities. |
|
VCID-g72t-7kx1-abcs
Aliases: CVE-2021-28700 XSA-383 |
xen/arm: No memory limit for dom0less domUs |
Affected by 45 other vulnerabilities. |
|
VCID-g9hd-27my-6baj
Aliases: CVE-2019-17345 |
x86/PV: page type reference counting issue with failed IOMMU update |
Affected by 96 other vulnerabilities. |
|
VCID-gdsj-4cbx-ufep
Aliases: CVE-2021-28705 |
issues with partially successful P2M updates on x86 |
Affected by 45 other vulnerabilities. |
|
VCID-gj1u-mbaj-kyc5
Aliases: CVE-2022-42310 XSA-415 |
Xenstore: Guests can create orphaned Xenstore nodes |
Affected by 45 other vulnerabilities. |
|
VCID-gsas-zqvf-2khf
Aliases: CVE-2020-15566 XSA-317 |
Incorrect error handling in event channel port allocation |
Affected by 96 other vulnerabilities. |
|
VCID-h9c6-yw5r-v3ex
Aliases: CVE-2020-29567 XSA-356 |
infinite loop when cleaning up IRQ vectors |
Affected by 45 other vulnerabilities. |
|
VCID-hg4z-ad3f-fbc2
Aliases: CVE-2022-26364 XSA-402 |
x86 pv: Insufficient care with non-coherent mappings |
Affected by 45 other vulnerabilities. |
|
VCID-hsau-swt9-kyf7
Aliases: CVE-2022-42319 XSA-416 |
Xenstore: Guests can cause Xenstore to not free temporary memory |
Affected by 45 other vulnerabilities. |
|
VCID-hx7j-eymk-4ygk
Aliases: CVE-2022-26359 |
IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues |
Affected by 45 other vulnerabilities. |
|
VCID-hyup-47wa-pfac
Aliases: CVE-2021-28690 XSA-377 |
x86: TSX Async Abort protections not restored after S3 |
Affected by 96 other vulnerabilities. Affected by 45 other vulnerabilities. |
|
VCID-jwdv-qe4x-yfgw
Aliases: CVE-2022-26357 XSA-399 |
race in VT-d domain ID cleanup |
Affected by 45 other vulnerabilities. |
|
VCID-k45n-139y-pyeq
Aliases: CVE-2019-11091 |
Microarchitectural Data Sampling speculative side channel |
Affected by 96 other vulnerabilities. |
|
VCID-k5j4-3xmv-a7bk
Aliases: CVE-2020-29566 XSA-348 |
undue recursion in x86 HVM context switch code |
Affected by 96 other vulnerabilities. Affected by 45 other vulnerabilities. |
|
VCID-kcj6-ua4t-ybgj
Aliases: CVE-2021-28696 |
IOMMU page mapping issues on x86 |
Affected by 45 other vulnerabilities. |
|
VCID-kf1y-ck1r-1kh8
Aliases: CVE-2020-11743 XSA-316 |
Bad error path in GNTTABOP_map_grant |
Affected by 96 other vulnerabilities. |
|
VCID-km9e-c58c-jkbp
Aliases: CVE-2019-17340 |
grant table transfer issues on large hosts |
Affected by 96 other vulnerabilities. |
|
VCID-knqd-zktw-cydm
Aliases: CVE-2021-0089 XSA-375 |
Speculative Code Store Bypass |
Affected by 96 other vulnerabilities. Affected by 45 other vulnerabilities. |
|
VCID-mcd1-vc14-y3g5
Aliases: CVE-2019-19578 XSA-309 |
Linear pagetable use / entry miscounts |
Affected by 96 other vulnerabilities. |
|
VCID-mcs2-ndqd-tydv
Aliases: CVE-2022-42331 XSA-429 |
x86: speculative vulnerability in 32bit SYSCALL path |
Affected by 45 other vulnerabilities. |
|
VCID-mf8g-nbkw-f7gr
Aliases: CVE-2021-28697 XSA-379 |
grant table v2 status pages may remain accessible after de-allocation |
Affected by 45 other vulnerabilities. |
|
VCID-mjsu-m9mt-ukdx
Aliases: CVE-2020-11739 XSA-314 |
Missing memory barriers in read-write unlock paths |
Affected by 96 other vulnerabilities. |
|
VCID-n3t2-m6br-ufb3
Aliases: CVE-2020-29040 XSA-355 |
stack corruption from XSA-346 change |
Affected by 45 other vulnerabilities. |
|
VCID-n7pg-b7kc-wkew
Aliases: CVE-2021-28692 XSA-373 |
inappropriate x86 IOMMU timeout detection / handling |
Affected by 96 other vulnerabilities. Affected by 45 other vulnerabilities. |
|
VCID-ndz3-372h-8fhk
Aliases: CVE-2020-29570 XSA-358 |
FIFO event channels control block related ordering |
Affected by 96 other vulnerabilities. Affected by 45 other vulnerabilities. |
|
VCID-nhj6-dhyx-xbas
Aliases: CVE-2018-12207 XSA-304 |
x86: Machine Check Error on Page Size Change DoS |
Affected by 96 other vulnerabilities. |
|
VCID-ns7u-fmmr-5ba4
Aliases: CVE-2019-11135 XSA-305 |
TSX Asynchronous Abort speculative side channel |
Affected by 96 other vulnerabilities. |
|
VCID-p3uc-18e9-skb4
Aliases: CVE-2020-29480 XSA-115 |
xenstore watch notifications lacking permission checks |
Affected by 96 other vulnerabilities. Affected by 45 other vulnerabilities. |
|
VCID-p7ug-wwk5-63gb
Aliases: CVE-2020-25600 XSA-342 |
out of bounds event channels available to 32-bit x86 domains |
Affected by 96 other vulnerabilities. Affected by 45 other vulnerabilities. |
|
VCID-pb8n-hmsc-syfw
Aliases: CVE-2022-33746 XSA-410 |
P2M pool freeing may take excessively long |
Affected by 45 other vulnerabilities. |
|
VCID-pphm-ygb7-q7g2
Aliases: CVE-2022-42322 XSA-419 |
Xenstore: Cooperating guests can create arbitrary numbers of nodes |
Affected by 45 other vulnerabilities. |
|
VCID-pv8w-7nk4-u3eg
Aliases: CVE-2019-17347 |
x86: PV kernel context switch corruption |
Affected by 96 other vulnerabilities. |
|
VCID-pzt3-abab-4kdd
Aliases: CVE-2020-27674 XSA-286 |
x86 PV guest INVLPG-like flushes may leave stale TLB entries |
Affected by 96 other vulnerabilities. Affected by 45 other vulnerabilities. |
|
VCID-qg9d-zmph-vufm
Aliases: CVE-2019-19581 |
find_next_bit() issues |
Affected by 96 other vulnerabilities. |
|
VCID-qnew-xqte-kbej
Aliases: CVE-2022-42321 XSA-418 |
Xenstore: Guests can crash xenstored via exhausting the stack |
Affected by 45 other vulnerabilities. |
|
VCID-qprv-989b-k3d3
Aliases: CVE-2021-28694 XSA-378 |
IOMMU page mapping issues on x86 |
Affected by 45 other vulnerabilities. |
|
VCID-r1ca-najr-xuh6
Aliases: CVE-2019-17348 XSA-294 |
x86 shadow: Insufficient TLB flushing when using PCID |
Affected by 96 other vulnerabilities. |
|
VCID-rgt3-wkaw-eqca
Aliases: CVE-2017-5754 |
Information leak via side effects of speculative execution |
Affected by 96 other vulnerabilities. |
|
VCID-rn1h-xy8j-uqgs
Aliases: CVE-2018-15468 XSA-269 |
x86: Incorrect MSR_DEBUGCTL handling lets guests enable BTS |
Affected by 96 other vulnerabilities. |
|
VCID-rqjg-umw7-vyfu
Aliases: CVE-2020-11742 XSA-318 |
Bad continuation handling in GNTTABOP_copy |
Affected by 96 other vulnerabilities. |
|
VCID-s4nf-p69f-pue8
Aliases: CVE-2021-28699 XSA-382 |
inadequate grant-v2 status frames array bounds check |
Affected by 45 other vulnerabilities. |
|
VCID-tb5v-mhdb-wbem
Aliases: CVE-2018-19961 |
insufficient TLB flushing / improper large page mappings with AMD IOMMUs |
Affected by 96 other vulnerabilities. |
|
VCID-td6e-x2qb-syg3
Aliases: CVE-2022-21125 |
x86: MMIO Stale Data vulnerabilities |
Affected by 45 other vulnerabilities. |
|
VCID-uunr-69dt-q7fn
Aliases: CVE-2021-28698 XSA-380 |
long running loops in grant table handling |
Affected by 45 other vulnerabilities. |
|
VCID-uvcp-ad38-2kcs
Aliases: CVE-2020-29482 XSA-323 |
Xenstore: wrong path length check |
Affected by 96 other vulnerabilities. Affected by 45 other vulnerabilities. |
|
VCID-v17d-ecc6-97au
Aliases: CVE-2020-11741 |
multiple xenoprof issues |
Affected by 96 other vulnerabilities. |
|
VCID-v8fp-rzfq-e3bs
Aliases: CVE-2017-5715 |
Information leak via side effects of speculative execution |
Affected by 96 other vulnerabilities. |
|
VCID-vb2u-yc2z-ayh5
Aliases: CVE-2020-25603 XSA-340 |
Missing memory barriers when accessing/allocating an event channel |
Affected by 96 other vulnerabilities. Affected by 45 other vulnerabilities. |
|
VCID-veqg-epht-cuaz
Aliases: CVE-2018-19962 XSA-275 |
insufficient TLB flushing / improper large page mappings with AMD IOMMUs |
Affected by 96 other vulnerabilities. |
|
VCID-vh89-pyaz-xbdg
Aliases: CVE-2018-12126 XSA-297 |
Microarchitectural Data Sampling speculative side channel |
Affected by 96 other vulnerabilities. |
|
VCID-vs9k-akwv-h3ak
Aliases: CVE-2022-23034 XSA-394 |
A PV guest could DoS Xen while unmapping a grant |
Affected by 45 other vulnerabilities. |
|
VCID-w2ch-guy5-6ye9
Aliases: CVE-2022-23035 XSA-395 |
Insufficient cleanup of passed-through device IRQs |
Affected by 45 other vulnerabilities. |
|
VCID-werg-d7s2-kfbw
Aliases: CVE-2018-19965 XSA-279 |
x86: DoS from attempting to use INVPCID with a non-canonical addresses |
Affected by 96 other vulnerabilities. |
|
VCID-wh75-sc4f-qqc1
Aliases: CVE-2022-42325 XSA-421 |
Xenstore: Guests can create arbitrary number of nodes via transactions |
Affected by 45 other vulnerabilities. |
|
VCID-wqv9-j35n-aqen
Aliases: CVE-2019-18423 XSA-301 |
add-to-physmap can be abused to DoS Arm hosts |
Affected by 96 other vulnerabilities. |
|
VCID-wvar-kt63-dkd5
Aliases: CVE-2020-15563 XSA-319 |
inverted code paths in x86 dirty VRAM tracking |
Affected by 96 other vulnerabilities. |
|
VCID-xcvw-eex8-j3bf
Aliases: CVE-2021-28707 |
PoD operations on misaligned GFNs |
Affected by 45 other vulnerabilities. |
|
VCID-xe4j-gg7f-wyfa
Aliases: CVE-2020-25599 XSA-343 |
races with evtchn_reset() |
Affected by 96 other vulnerabilities. Affected by 45 other vulnerabilities. |
|
VCID-xet6-w2vq-67eq
Aliases: CVE-2020-15564 XSA-327 |
Missing alignment check in VCPUOP_register_vcpu_info |
Affected by 96 other vulnerabilities. |
|
VCID-xubx-wxc9-tfay
Aliases: CVE-2018-18883 XSA-278 |
x86: Nested VT-x usable even when disabled |
Affected by 96 other vulnerabilities. |
|
VCID-yh4r-yysd-1ua5
Aliases: CVE-2018-15470 XSA-272 |
oxenstored does not apply quota-maxentity |
Affected by 96 other vulnerabilities. |
|
VCID-z3g4-1vhq-97dj
Aliases: CVE-2022-42326 |
Xenstore: Guests can create arbitrary number of nodes via transactions |
Affected by 45 other vulnerabilities. |
|
VCID-z3qj-cnxq-pkgq
Aliases: CVE-2021-28706 XSA-385 |
guests may exceed their designated memory limit |
Affected by 45 other vulnerabilities. |
|
VCID-z8zf-cqkb-guge
Aliases: CVE-2022-26360 XSA-400 |
IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues |
Affected by 45 other vulnerabilities. |
|
VCID-z9r8-s6v7-zkgd
Aliases: CVE-2018-12130 |
Microarchitectural Data Sampling speculative side channel |
Affected by 96 other vulnerabilities. |
|
VCID-zh3b-cxzx-abc6
Aliases: CVE-2019-17341 |
race with pass-through device hotplug |
Affected by 96 other vulnerabilities. |
|
VCID-zkyv-h5at-xkgq
Aliases: CVE-2022-23825 XSA-407 |
Retbleed - arbitrary speculative code execution with return instructions |
Affected by 45 other vulnerabilities. |
|
VCID-zm6z-2dnk-hyf8
Aliases: CVE-2019-19583 XSA-308 |
VMX: VMentry failure with debug exceptions and blocked states |
Affected by 96 other vulnerabilities. |
|
VCID-zrxf-3w1d-t3ba
Aliases: CVE-2020-28368 XSA-351 |
Information leak via power sidechannel |
Affected by 96 other vulnerabilities. Affected by 45 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-12wz-93wy-euhs | libxl leak of pv kernel and initrd on error |
CVE-2015-8341
|
| VCID-16hm-nyk9-5uff | stale P2M mappings due to insufficient error checking |
CVE-2017-10918
XSA-222 |
| VCID-184d-4jsf-yqed | improper bug check in x86 log-dirty handling |
CVE-2017-17565
XSA-251 |
| VCID-1ewg-kc47-bucs | XENMEM_exchange error handling issues |
CVE-2015-8340
|
| VCID-1muu-6ytt-jkc5 | grant table operations mishandle reference counts |
CVE-2017-10921
|
| VCID-1xn5-2d9n-vuc4 | Stale TLB entry due to page type release race |
CVE-2017-15588
XSA-241 |
| VCID-21bx-skks-s7gc | Missing p2m error checking in PoD code |
CVE-2017-17045
|
| VCID-2h35-vvte-g7cs | x86: CPU lockup during exception delivery |
CVE-2015-8104
|
| VCID-2ke1-fmf7-7ydt | passed through PCI devices may corrupt host memory after deassignment |
CVE-2019-18424
XSA-302 |
| VCID-2n5n-1czt-skbu | delimiter injection vulnerabilities in pygrub |
CVE-2016-9379
|
| VCID-2qvr-9266-d7bt | x86 segment base write emulation lacking canonical address checks |
CVE-2016-9385
XSA-193 |
| VCID-2yke-a3ka-ubaq | Device quarantine for alternate pci assignment methods |
CVE-2019-19579
XSA-306 |
| VCID-3488-1xdv-4kc8 | Further issues with restartable PV type change operations |
CVE-2019-19580
XSA-310 |
| VCID-3863-ejr7-5bfd | Races in the grant table unmap code |
CVE-2017-10913
|
| VCID-3pzv-55sc-37ge | Bugs in dynamic height handling for AMD IOMMU pagetables |
CVE-2019-19577
XSA-311 |
| VCID-3qjm-4egs-1kax | Issues with restartable PV type change operations |
CVE-2019-18421
XSA-299 |
| VCID-49cz-nu6d-b7dq | x86 64-bit bit test instruction emulation broken |
CVE-2016-9383
XSA-195 |
| VCID-49x7-nf2n-4ya6 | arm: Host crash caused by VMID exhaustion |
CVE-2016-5242
|
| VCID-4w49-gjvc-mqcy | grant table operations mishandle reference counts |
CVE-2017-10920
XSA-224 |
| VCID-515s-df9v-wbab | x86: populate-on-demand balloon size inaccuracy can crash guests |
CVE-2015-7972
|
| VCID-51ck-7qgg-tfhp | x86: Uncontrolled creation of large page mappings by PV guests |
CVE-2015-7835
|
| VCID-5gab-898z-v7h5 | VMX: intercept issue with INVLPG on non-canonical address |
CVE-2016-1571
|
| VCID-5gua-j7zw-a7ex | qemu may drive Xen into unbounded loop |
CVE-2018-10981
XSA-262 |
| VCID-5km7-7wj4-tydz | xen: memory leak when destroying guest without PT devices (XSA-207) |
CVE-2017-14431
|
| VCID-6b1e-39na-b7gf | guest use of HLE constructs may lock up host |
CVE-2018-19967
XSA-282 |
| VCID-6jsn-7538-a7ha | L1 Terminal Fault speculative side channel |
CVE-2018-3646
XSA-273 |
| VCID-6s1x-qtmr-jkg4 | multiple MSI mapping issues on x86 |
CVE-2017-15590
XSA-237 |
| VCID-6vxj-m9ud-5ke9 | Unlimited Arm Atomics Operations |
CVE-2019-17350
|
| VCID-72xf-u3h5-zfds | ARM guests may induce host asynchronous abort |
CVE-2016-9816
|
| VCID-747z-zf92-4fbx | grant_table: possibly premature clearing of GTF_writing / GTF_reading |
CVE-2017-12855
XSA-230 |
| VCID-75hg-p8uc-p7ex | Speculative Store Bypass |
CVE-2018-3639
XSA-263 |
| VCID-76k4-hmgg-63fq | add-to-physmap error paths fail to release lock on ARM |
CVE-2017-15596
XSA-235 |
| VCID-77vv-s9qz-9fft | x86: Incorrect handling of IST settings during CPU hotplug |
CVE-2017-15594
XSA-244 |
| VCID-78v1-hz5k-4beu | x86 software interrupt injection mis-handled |
CVE-2016-9377
|
| VCID-7gba-36c6-r7em | PV superpage functionality missing sanity checks |
CVE-2016-1570
|
| VCID-7ghz-5whc-u3ee | find_next_bit() issues |
CVE-2019-19582
XSA-307 |
| VCID-7vn6-5h93-27hn | L1 Terminal Fault speculative side channel |
CVE-2018-3620
|
| VCID-83pg-u792-vkht | XENMEM_exchange error handling issues |
CVE-2015-8339
|
| VCID-86rr-juws-eya2 | page type reference leak on x86 |
CVE-2017-15593
XSA-242 |
| VCID-8g31-68m7-b3ak | grant table v2 -> v1 transition may crash Xen |
CVE-2018-7541
XSA-255 |
| VCID-8xdy-x7d6-43hk | Unsanitised driver domain input in libxl device handling |
CVE-2016-4963
|
| VCID-9df6-w2mk-37bp | arm: Host crash when preempting a multicall |
CVE-2015-7812
|
| VCID-9u79-6d2w-aqcr | Information leak through XEN_DOMCTL_gettscinfo |
CVE-2015-3340
|
| VCID-9yb3-ge9b-sbe1 | VMX: guest user mode may crash guest with non-canonical RIP |
CVE-2016-2271
|
| VCID-a2ms-wryt-duct | x86 software interrupt injection mis-handled |
CVE-2016-9378
XSA-196 |
| VCID-adh2-ubyt-xyfu | x86 PV guests may gain access to internally used pages |
CVE-2017-17566
|
| VCID-an7r-pjrv-pyde | Fix for XSA-240 conflicts with shadow paging |
CVE-2018-19966
XSA-280 |
| VCID-anrs-qj58-p3fj | x86 null segments not always treated as unusable |
CVE-2016-9386
XSA-191 |
| VCID-au4w-wt7d-37h4 | information leak in legacy x86 FPU/XMM initialization |
CVE-2015-8555
|
| VCID-aw3c-9db1-a7eh | ARM: Interrupts are unconditionally unmasked in exception handlers |
CVE-2019-18422
XSA-303 |
| VCID-b829-8859-cfg4 | insufficient grant unmapping checks for x86 PV guests |
CVE-2017-14319
XSA-234 |
| VCID-bd46-xyhc-8uf5 | missing descriptor table limit checking in x86 PV emulation |
CVE-2019-18425
XSA-298 |
| VCID-cbtr-g13y-tbhz | Unlimited Arm Atomics Operations |
CVE-2019-17349
|
| VCID-crrb-s8ya-kkef | x86: Mishandling of SYSCALL singlestep during emulation |
CVE-2016-10013
XSA-204 |
| VCID-ctrg-1peq-vfdx | xl command line config handling stack overflow |
CVE-2015-3259
|
| VCID-cuab-yybg-6uhs | Use of v2 grant tables may cause crash on ARM |
CVE-2018-15469
XSA-268 |
| VCID-cvdk-37ua-3uck | x86 vHPET interrupt injection errors |
CVE-2018-10982
XSA-261 |
| VCID-cze8-zk35-z7gm | x86: missing NULL pointer check in VMFUNC emulation |
CVE-2016-10025
XSA-203 |
| VCID-dc9p-tdf1-h7ad | x86: CPU lockup during exception delivery |
CVE-2015-5307
|
| VCID-dg8u-3vd1-27ef | arm: vgic: Out-of-bound access when sending SGIs |
CVE-2017-10923
XSA-225 |
| VCID-dk8j-hwqd-33ek | ARM guests may induce host asynchronous abort |
CVE-2016-9818
XSA-201 |
| VCID-dzsn-fpfg-vbhy | leak of main per-domain vcpu pointer array |
CVE-2015-7969
|
| VCID-eg78-hrzm-vucz | arm: Race between domain destruction and memory allocation decrease |
CVE-2015-7814
|
| VCID-emjs-dbhy-nqdr | x86 software guest page walk PS bit handling flaw |
CVE-2016-4480
|
| VCID-eutx-gmuf-gkeq | libxl fails to honour readonly flag on HVM emulated SCSI disks |
CVE-2018-12892
XSA-266 |
| VCID-fafv-creg-qfbt | x86: PV guest may crash Xen with XPTI |
CVE-2018-10471
XSA-259 |
| VCID-favj-4du1-qqe8 | VCPUOP_initialise DoS |
CVE-2019-18420
|
| VCID-fe96-8s69-37fh | long running memory operations on ARM |
CVE-2015-8338
|
| VCID-fj2r-tp5w-j3dg | x86: unintentional logging upon guest changing callback method |
CVE-2015-8615
|
| VCID-fzvt-zmn5-wfb3 | grant transfer allows PV guest to elevate privileges |
CVE-2017-8904
XSA-214 |
| VCID-gb8y-jxgr-5qdg | possible memory corruption via failsafe callback |
CVE-2017-8905
XSA-215 |
| VCID-gr1e-xzu5-1kfh | guest 32-bit ELF symbol table load leaking host data |
CVE-2016-9384
XSA-194 |
| VCID-h4hf-xbq6-n7e1 | Unsanitised guest input in libxl device handling code |
CVE-2016-4962
|
| VCID-h8w2-rzzc-qqf5 | NULL pointer deref in event channel poll |
CVE-2017-10917
XSA-221 |
| VCID-jfmu-gcux-y3et | x86: inconsistent cachability flags on guest mappings |
CVE-2016-2270
|
| VCID-jkch-ysx6-2kd6 | cxenstored: Race in domain cleanup |
CVE-2017-14317
XSA-233 |
| VCID-jnab-uhtk-huf6 | x86: Long latency populate-on-demand operation is not preemptible |
CVE-2015-7970
|
| VCID-k8at-7tax-5ffr | hypervisor stack leak in x86 I/O intercept code |
CVE-2017-15589
XSA-239 |
| VCID-k8hr-hneg-2baf | arm: various unimplemented hypercalls log without rate limiting |
CVE-2015-7813
|
| VCID-ksn6-6gex-17hv | x86: some pmu and profiling hypercalls log without rate limiting |
CVE-2015-7971
|
| VCID-m5h4-49wd-y7b1 | libxl fails to honour readonly flag on disks with qemu-xen |
CVE-2015-7311
|
| VCID-mbv9-7v2m-4qf8 | page transfer may allow PV guest to elevate privilege |
CVE-2017-10912
XSA-217 |
| VCID-mcd1-vc14-y3g5 | Linear pagetable use / entry miscounts |
CVE-2019-19578
XSA-309 |
| VCID-mehs-bmad-pkds | x86: #DB exception safety check can be triggered by a guest |
CVE-2018-12893
XSA-265 |
| VCID-mmpb-71zs-4fft | printk is not rate-limited in xenmem_add_to_physmap_one |
CVE-2015-6654
|
| VCID-mspa-23bw-9be1 | delimiter injection vulnerabilities in pygrub |
CVE-2016-9380
XSA-198 |
| VCID-n5nt-82va-kfeb | improper x86 shadow mode refcount error handling |
CVE-2017-17564
|
| VCID-n7ds-k8b1-u3d2 | pin count / page reference race in grant table code |
CVE-2017-15597
XSA-236 |
| VCID-nhj6-dhyx-xbas | x86: Machine Check Error on Page Size Change DoS |
CVE-2018-12207
XSA-304 |
| VCID-nmg3-4zaj-zbaq | preemption checks bypassed in x86 PV MM handling |
CVE-2018-12891
XSA-264 |
| VCID-ns7u-fmmr-5ba4 | TSX Asynchronous Abort speculative side channel |
CVE-2019-11135
XSA-305 |
| VCID-nvk7-bptq-5ffh | x86: insufficient reference counts during shadow emulation |
CVE-2017-10915
XSA-219 |
| VCID-nyst-ybjq-3uet | x86: Missing SMAP whitelisting in 32-bit exception / event delivery |
CVE-2016-6259
XSA-183 |
| VCID-p3jn-mvy5-gkgw | broken x86 shadow mode refcount overflow check |
CVE-2017-17563
|
| VCID-pd4h-ra44-gyb5 | ARM guest disabling interrupt may crash Xen |
CVE-2017-10919
XSA-223 |
| VCID-q479-9fry-y7dh | x86: Privilege escalation in PV guests |
CVE-2016-6258
XSA-182 |
| VCID-qawr-2f43-4yeg | x86: infinite loop due to missing PoD error checking |
CVE-2017-17044
|
| VCID-qg9d-zmph-vufm | find_next_bit() issues |
CVE-2019-19581
|
| VCID-qmav-pppv-p3e1 | x86: mishandling of debug exceptions |
CVE-2018-8897
XSA-260 |
| VCID-qtbj-1dcj-ykhz | x86 HVM: Overflow of sh_ctxt->seg_reg[] |
CVE-2016-7094
XSA-187 |
| VCID-r8wr-5dem-z7db | ARM guests may induce host asynchronous abort |
CVE-2016-9817
|
| VCID-rn1h-xy8j-uqgs | x86: Incorrect MSR_DEBUGCTL handling lets guests enable BTS |
CVE-2018-15468
XSA-269 |
| VCID-rwqp-dwnr-2ubx | x86 PV guests may be able to mask interrupts |
CVE-2016-10024
XSA-202 |
| VCID-sm96-n11u-t7a9 | vulnerability in the iret hypercall handler |
CVE-2015-4164
|
| VCID-sqyq-m67p-z7cc | x86 PVH guest without LAPIC may DoS the host |
CVE-2018-7542
XSA-256 |
| VCID-srt6-6fge-8qbp | x86 shadow pagetables: address width overflow |
CVE-2016-3960
|
| VCID-t14z-dxet-fyet | broken AMD FPU FIP/FDP/FOP leak workaround |
CVE-2016-3159
|
| VCID-t5uz-r29w-nueq | Information leak via crafted user-supplied CDROM |
CVE-2018-10472
XSA-258 |
| VCID-tb5v-mhdb-wbem | insufficient TLB flushing / improper large page mappings with AMD IOMMUs |
CVE-2018-19961
|
| VCID-tvaz-fjzc-aqe2 | ARM guests may induce host asynchronous abort |
CVE-2016-9815
|
| VCID-tvgp-a9ud-mfgt | grant_table: Race conditions with maptrack free list handling |
CVE-2017-12136
XSA-228 |
| VCID-twnq-fujf-d7fs | ARM: Some memory not scrubbed at boot |
CVE-2017-17046
XSA-245 |
| VCID-umyp-nvd9-b7b9 | DMOP map/unmap missing argument checks |
CVE-2017-15591
|
| VCID-unyv-cxb5-ruga | Speculative register leakage from lazy FPU context switching |
CVE-2018-3665
XSA-267 |
| VCID-upr4-b3wq-gybu | x86: broken check in memory_exchange() permits PV guest breakout |
CVE-2017-7228
XSA-212 |
| VCID-uq8r-gwnd-2fh1 | x86: Disallow L3 recursive pagetable for 32-bit PV guests |
CVE-2016-7092
XSA-185 |
| VCID-us1d-sdm8-sbh6 | paravirtualized drivers incautious about shared memory contents |
CVE-2015-8550
|
| VCID-uwu2-a6u1-uqb8 | Missing check for grant table |
CVE-2017-14318
XSA-232 |
| VCID-v25t-h3tp-nffb | broken AMD FPU FIP/FDP/FOP leak workaround |
CVE-2016-3158
|
| VCID-v8fp-rzfq-e3bs | Information leak via side effects of speculative execution |
CVE-2017-5715
|
| VCID-veqg-epht-cuaz | insufficient TLB flushing / improper large page mappings with AMD IOMMUs |
CVE-2018-19962
XSA-275 |
| VCID-vh8t-w89y-bbd8 | Missing NUMA node parameter verification |
CVE-2017-14316
XSA-231 |
| VCID-vm3z-k775-gqax | Unlimited recursion in linear pagetable de-typing |
CVE-2017-15595
XSA-240 |
| VCID-w8z5-k8fb-jbc7 | use after free in FIFO event channel code |
CVE-2016-7154
|
| VCID-werg-d7s2-kfbw | x86: DoS from attempting to use INVPCID with a non-canonical addresses |
CVE-2018-19965
XSA-279 |
| VCID-what-pe1h-gfa7 | Races in the grant table unmap code |
CVE-2017-10914
XSA-218 |
| VCID-wjcc-bpcz-a3ee | x86: Incorrect handling of self-linear shadow mappings with translated guests |
CVE-2017-15592
XSA-243 |
| VCID-wqv9-j35n-aqen | add-to-physmap can be abused to DoS Arm hosts |
CVE-2019-18423
XSA-301 |
| VCID-x6ks-k1hc-27du | DoS via non-preemptable L3/L4 pagetable freeing |
CVE-2018-7540
XSA-252 |
| VCID-xa1k-c5dm-97am | CR0.TS and CR0.EM not always honored for x86 HVM guests |
CVE-2016-7777
XSA-190 |
| VCID-xef9-czpm-y7e7 | multiple problems with transitive grants |
CVE-2017-12135
XSA-226 |
| VCID-xg2s-vp8y-uuhb | x86: 64bit PV guest breakout via pagetable use-after-mode-change |
CVE-2017-8903
XSA-213 |
| VCID-y22w-wqt3-sues | x86 CMPXCHG8B emulation fails to ignore operand size override |
CVE-2016-9932
XSA-200 |
| VCID-yahm-s7bt-akg6 | x86: PKRU and BND* leakage between vCPU-s |
CVE-2017-10916
XSA-220 |
| VCID-ycv1-t5bt-zqhj | x86: PV privilege escalation via map_grant_ref |
CVE-2017-12137
XSA-227 |
| VCID-yh4r-yysd-1ua5 | oxenstored does not apply quota-maxentity |
CVE-2018-15470
XSA-272 |
| VCID-yj2s-b6c9-27be | x86 task switch to VM86 mode mis-handled |
CVE-2016-9382
XSA-192 |
| VCID-yzmc-turm-ffds | GNTTABOP_swap_grant_ref operation misbehavior |
CVE-2015-4163
|
| VCID-zm6z-2dnk-hyf8 | VMX: VMentry failure with debug exceptions and blocked states |
CVE-2019-19583
XSA-308 |
| VCID-zneg-pw5s-abhy | grant table operations mishandle reference counts |
CVE-2017-10922
|