| Max CVSS | 6.9 | Min CVSS | 1.9 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2012-5513 | 6.9 |
The XENMEM_exchange handler in Xen 4.2 and earlier does not properly check the memory address, which allows local PV guest OS administrators to cause a denial of service (crash) or possibly gain privileges via unspecified vectors that overwrite memor
|
13-02-2023 - 00:26 | 13-12-2012 - 11:53 | |
| CVE-2012-5510 | 4.7 |
Xen 4.x, when downgrading the grant table version, does not properly remove the status page from the tracking list when freeing the page, which allows local guest OS administrators to cause a denial of service (hypervisor crash) via unspecified vecto
|
29-08-2017 - 01:32 | 13-12-2012 - 11:53 | |
| CVE-2012-4537 | 2.1 |
Xen 3.4 through 4.2, and possibly earlier versions, does not properly synchronize the p2m and m2p tables when the set_p2m_entry function fails, which allows local HVM guest OS administrators to cause a denial of service (memory consumption and assert
|
29-08-2017 - 01:32 | 21-11-2012 - 23:55 | |
| CVE-2012-4538 | 4.9 |
The HVMOP_pagetable_dying hypercall in Xen 4.0, 4.1, and 4.2 does not properly check the pagetable state when running on shadow pagetables, which allows a local HVM guest OS to cause a denial of service (hypervisor crash) via unspecified vectors.
|
29-08-2017 - 01:32 | 24-11-2012 - 20:55 | |
| CVE-2012-5515 | 4.7 |
The (1) XENMEM_decrease_reservation, (2) XENMEM_populate_physmap, and (3) XENMEM_exchange hypercalls in Xen 4.2 and earlier allow local guest administrators to cause a denial of service (long loop and hang) via a crafted extent_order value.
|
29-08-2017 - 01:32 | 13-12-2012 - 11:53 | |
| CVE-2012-5514 | 4.7 |
The guest_physmap_mark_populate_on_demand function in Xen 4.2 and earlier does not properly unlock the subject GFNs when checking if they are in use, which allows local guest HVM administrators to cause a denial of service (hang) via unspecified vect
|
29-08-2017 - 01:32 | 13-12-2012 - 11:53 | |
| CVE-2012-4535 | 1.9 |
Xen 3.4 through 4.2, and possibly earlier versions, allows local guest OS administrators to cause a denial of service (Xen infinite loop and physical CPU consumption) by setting a VCPU with an "inappropriate deadline."
|
29-08-2017 - 01:32 | 21-11-2012 - 23:55 | |
| CVE-2012-4539 | 2.1 |
Xen 4.0 through 4.2, when running 32-bit x86 PV guests on 64-bit hypervisors, allows local guest OS administrators to cause a denial of service (infinite loop and hang or crash) via invalid arguments to GNTTABOP_get_status_frames, aka "Grant table hy
|
29-08-2017 - 01:32 | 21-11-2012 - 23:55 | |
| CVE-2011-3131 | 4.6 |
Xen 4.1.1 and earlier allows local guest OS kernels with control of a PCI[E] device to cause a denial of service (CPU consumption and host hang) via many crafted DMA requests that are denied by the IOMMU, which triggers a livelock.
|
13-12-2012 - 11:53 | 13-12-2012 - 11:53 |