Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Advisory: xen — FEDORA-2023-da8315e641 Clear all filters
TI-2022-20550 CVE-2022-42334 · GHSA-v57p-c5gg-pq5v

Resource allocation without limits in xen

Priority LOW 28

x86/HVM pinned cache attributes mis-handling T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] To allow cachability control for HVM guests wi…

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00267 Published 2023-03-21 No fix listed CWE-770
TI-2022-20549 CVE-2022-42333 · GHSA-vgj2-gwrp-65hq

Resource allocation without limits in xen

Priority MEDIUM 40

x86/HVM pinned cache attributes mis-handling T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] To allow cachability control for HVM guests wi…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01189 Published 2023-03-21 No fix listed CWE-770
TI-2022-20548 CVE-2022-42332 · GHSA-jg93-x3r7-r8pf

Use after free in xen

Priority LOW 36

x86 shadow plus log-dirty mode use-after-free In environments where host assisted address translation is necessary but Hardware Assisted Paging (HAP) is unavailable, Xen will run guests in so called shadow mode.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0027 Published 2023-03-21 No fix listed CWE-416