| Max CVSS | 7.2 | Min CVSS | 1.9 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2012-3515 | 7.2 |
Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend, allows local OS guest users to gain privileges via a crafted escape VT100 sequence that triggers the overwrite of a "device mode
|
13-02-2023 - 04:34 | 23-11-2012 - 20:55 | |
| CVE-2012-4411 | 4.6 |
The graphical console in Xen 4.0, 4.1 and 4.2 allows local OS guest administrators to obtain sensitive host resource information via the qemu monitor. NOTE: this might be a duplicate of CVE-2007-0998.
|
13-02-2023 - 00:26 | 23-11-2012 - 20:55 | |
| CVE-2012-2625 | 2.7 |
The PyGrub boot loader in Xen unstable before changeset 25589:60f09d1ab1fe, 4.2.x, and 4.1.x allows local para-virtualized guest users to cause a denial of service (memory consumption) via a large (1) bzip2 or (2) lzma compressed kernel image.
|
13-04-2018 - 13:00 | 31-10-2012 - 16:55 | |
| CVE-2007-0998 | 4.3 |
The VNC server implementation in QEMU, as used by Xen and possibly other environments, allows local users of a guest operating system to read arbitrary files on the host operating system via unspecified vectors related to QEMU monitor mode, as demons
|
11-10-2017 - 01:31 | 20-03-2007 - 10:19 | |
| CVE-2012-4537 | 2.1 |
Xen 3.4 through 4.2, and possibly earlier versions, does not properly synchronize the p2m and m2p tables when the set_p2m_entry function fails, which allows local HVM guest OS administrators to cause a denial of service (memory consumption and assert
|
29-08-2017 - 01:32 | 21-11-2012 - 23:55 | |
| CVE-2012-4544 | 2.1 |
The PV domain builder in Xen 4.2 and earlier does not validate the size of the kernel or ramdisk (1) before or (2) after decompression, which allows local guest administrators to cause a denial of service (domain 0 memory consumption) via a crafted (
|
29-08-2017 - 01:32 | 31-10-2012 - 16:55 | |
| CVE-2012-4538 | 4.9 |
The HVMOP_pagetable_dying hypercall in Xen 4.0, 4.1, and 4.2 does not properly check the pagetable state when running on shadow pagetables, which allows a local HVM guest OS to cause a denial of service (hypervisor crash) via unspecified vectors.
|
29-08-2017 - 01:32 | 24-11-2012 - 20:55 | |
| CVE-2012-4536 | 2.1 |
The (1) domain_pirq_to_emuirq and (2) physdev_unmap_pirq functions in Xen 2.2 allows local guest OS administrators to cause a denial of service (Xen crash) via a crafted pirq value that triggers an out-of-bounds read.
|
29-08-2017 - 01:32 | 21-11-2012 - 23:55 | |
| CVE-2012-4535 | 1.9 |
Xen 3.4 through 4.2, and possibly earlier versions, allows local guest OS administrators to cause a denial of service (Xen infinite loop and physical CPU consumption) by setting a VCPU with an "inappropriate deadline."
|
29-08-2017 - 01:32 | 21-11-2012 - 23:55 | |
| CVE-2012-4539 | 2.1 |
Xen 4.0 through 4.2, when running 32-bit x86 PV guests on 64-bit hypervisors, allows local guest OS administrators to cause a denial of service (infinite loop and hang or crash) via invalid arguments to GNTTABOP_get_status_frames, aka "Grant table hy
|
29-08-2017 - 01:32 | 21-11-2012 - 23:55 | |
| CVE-2012-3494 | 2.1 |
The set_debugreg hypercall in include/asm-x86/debugreg.h in Xen 4.0, 4.1, and 4.2, and Citrix XenServer 6.0.2 and earlier, when running on x86-64 systems, allows local OS guest users to cause a denial of service (host crash) by writing to the reserve
|
29-08-2017 - 01:31 | 23-11-2012 - 20:55 | |
| CVE-2012-3498 | 5.6 |
PHYSDEVOP_map_pirq in Xen 4.1 and 4.2 and Citrix XenServer 6.0.2 and earlier allows local HVM guest OS kernels to cause a denial of service (host crash) and possibly read hypervisor or guest memory via vectors related to a missing range check of map-
|
29-08-2017 - 01:31 | 23-11-2012 - 20:55 | |
| CVE-2012-3497 | 6.9 |
(1) TMEMC_SAVE_GET_CLIENT_WEIGHT, (2) TMEMC_SAVE_GET_CLIENT_CAP, (3) TMEMC_SAVE_GET_CLIENT_FLAGS and (4) TMEMC_SAVE_END in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 allow local guest OS users to cause a denial of service (NULL pointer d
|
29-08-2017 - 01:31 | 23-11-2012 - 20:55 | |
| CVE-2012-3496 | 4.7 |
XENMEM_populate_physmap in Xen 4.0, 4.1, and 4.2, and Citrix XenServer 6.0.2 and earlier, when translating paging mode is not used, allows local PV OS guest kernels to cause a denial of service (BUG triggered and host crash) via invalid flags such as
|
29-08-2017 - 01:31 | 23-11-2012 - 20:55 | |
| CVE-2012-3495 | 6.1 |
The physdev_get_free_pirq hypercall in arch/x86/physdev.c in Xen 4.1.x and Citrix XenServer 6.0.2 and earlier uses the return value of the get_free_pirq function as an array index without checking that the return value indicates an error, which allow
|
01-07-2017 - 01:29 | 23-11-2012 - 20:55 | |
| CVE-2012-2934 | 1.9 |
Xen 4.0, and 4.1, when running a 64-bit PV guest on "older" AMD CPUs, does not properly protect against a certain AMD processor bug, which allows local guest OS users to cause a denial of service (host hang) via sequential execution of instructions a
|
05-05-2014 - 05:11 | 03-12-2012 - 21:55 |