Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Advisory: xen — FEDORA-2021-2b3a2de94f Clear all filters
TI-2021-09775 CVE-2021-28709 · GHSA-5rjh-29pm-3mx4

Improper handling of exceptional conditions in xen

Priority LOW 34

issues with partially successful P2M updates on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] x86 HVM and PVH guests may be started i…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00366 Published 2021-11-24 No fix listed CWE-755
TI-2021-09774 CVE-2021-28708 · GHSA-959p-vvwh-xj92

PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs…

Priority MEDIUM 40

PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] x86 HVM and PVH guests may be started in populate-on-dema…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00353 Published 2021-11-24 Fixed in next of 4.14.x
TI-2021-09773 CVE-2021-28707 · GHSA-jpp8-232v-26fc

PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs…

Priority LOW 38

PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] x86 HVM and PVH guests may be started in populate-on-dema…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00374 Published 2021-11-24 Fixed in next of 4.14.x
TI-2021-09772 CVE-2021-28706 · GHSA-x89c-76jf-xx4h

Resource allocation without limits in xen

Priority MEDIUM 42

guests may exceed their designated memory limit When a guest is permitted to have close to 16TiB of memory, it may be able to issue hypercalls to increase its memory allocation beyond the administrator established limit.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.02233 Published 2021-11-24 Fixed in next of 4.15.x CWE-770
TI-2021-09771 CVE-2021-28705 · GHSA-397g-22v6-9m75

Improper handling of exceptional conditions in xen

Priority LOW 34

issues with partially successful P2M updates on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] x86 HVM and PVH guests may be started i…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00361 Published 2021-11-24 No fix listed CWE-755
TI-2021-09770 CVE-2021-28704 · GHSA-gjrp-cpc9-h4r7

PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs…

Priority LOW 38

PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] x86 HVM and PVH guests may be started in populate-on-dema…

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00353 Published 2021-11-24 Fixed in next of 4.14.x