Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Advisory: xen — FEDORA-2021-d68ed12e46 Clear all filters
TI-2021-09762 CVE-2021-28696 · GHSA-p2f6-35c3-q43f

Incorrect authorization in xen

Priority LOW 30

IOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Both AMD and Intel allow ACPI tables to specify regions of…

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00361 Published 2021-08-27 No fix listed CWE-863
TI-2021-09763 CVE-2021-28697 · GHSA-2h72-2hx7-mmcq

Race condition in xen

Priority LOW 34

grant table v2 status pages may remain accessible after de-allocation Guest get permitted access to certain Xen-owned pages of memory.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00263 Published 2021-08-27 Fixed in next of 4.14.x, next of 4.12.x CWE-362
TI-2021-09764 CVE-2021-28698 · GHSA-2g34-x978-mw32

Infinite loop in xen

Priority LOW 25

long running loops in grant table handling In order to properly monitor resource use, Xen maintains information on the grant mappings a domain may create to map grants offered by other domains.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00348 Published 2021-08-27 Fixed in next of xen-unstable CWE-835
TI-2021-09766 CVE-2021-28700 · GHSA-whw9-2rv6-633x

Resource allocation without limits in xen

Priority LOW 26

xen/arm: No memory limit for dom0less domUs The dom0less feature allows an administrator to create multiple unprivileged domains directly from Xen.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.0187 Published 2021-08-27 Fixed in next of xen-unstable CWE-770