| Max CVSS | 7.2 | Min CVSS | 1.9 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2017-17044 | 4.9 |
An issue was discovered in Xen through 4.9.x allowing HVM guest OS users to cause a denial of service (infinite loop and host OS hang) by leveraging the mishandling of Populate on Demand (PoD) errors.
|
03-10-2019 - 00:03 | 28-11-2017 - 23:29 | |
| CVE-2017-15593 | 4.9 |
An issue was discovered in Xen through 4.9.x allowing x86 PV guest OS users to cause a denial of service (memory leak) because reference counts are mishandled.
|
03-10-2019 - 00:03 | 18-10-2017 - 08:29 | |
| CVE-2017-17045 | 7.2 |
An issue was discovered in Xen through 4.9.x allowing HVM guest OS users to gain privileges on the host OS, obtain sensitive information, or cause a denial of service (BUG and host OS crash) by leveraging the mishandling of Populate on Demand (PoD) P
|
03-10-2019 - 00:03 | 28-11-2017 - 23:29 | |
| CVE-2018-10981 | 4.9 |
An issue was discovered in Xen through 4.10.x allowing x86 HVM guest OS users to cause a denial of service (host OS infinite loop) in situations where a QEMU device model attempts to make invalid transitions between states of a request.
|
03-10-2019 - 00:03 | 10-05-2018 - 22:29 | |
| CVE-2017-15594 | 4.6 |
An issue was discovered in Xen through 4.9.x allowing x86 SVM PV guest OS users to cause a denial of service (hypervisor crash) or gain privileges because IDT settings are mishandled during CPU hotplugging.
|
03-10-2019 - 00:03 | 18-10-2017 - 08:29 | |
| CVE-2017-15592 | 7.2 |
An issue was discovered in Xen through 4.9.x allowing x86 HVM guest OS users to cause a denial of service (hypervisor crash) or possibly gain privileges because self-linear shadow mappings are mishandled for translated guests.
|
03-10-2019 - 00:03 | 18-10-2017 - 08:29 | |
| CVE-2018-10472 | 1.9 |
An issue was discovered in Xen through 4.10.x allowing x86 HVM guest OS users (in certain configurations) to read arbitrary dom0 files via QMP live insertion of a CDROM, in conjunction with specifying the target file as the backing file of a snapshot
|
31-10-2018 - 10:30 | 27-04-2018 - 15:29 | |
| CVE-2017-15595 | 7.2 |
An issue was discovered in Xen through 4.9.x allowing x86 PV guest OS users to cause a denial of service (unbounded recursion, stack consumption, and hypervisor crash) or possibly gain privileges via crafted page-table stacking.
|
30-10-2018 - 10:29 | 18-10-2017 - 08:29 |