Vulnerabilidades en Xen
111 resultadosCVE-2023-34327MEDIUMx86/AMD: Debug Mask handlingEPSS 0.3%CVE-2023-34328MEDIUMx86/AMD: Debug Mask handlingEPSS 0.3%CVE-2023-34321LOWarm32: The cache may not be properly cleaned/invalidatedEPSS 0.3%CVE-2023-46836MEDIUMx86: BTC/SRSO fixes not fully effectiveEPSS 0.3%CVE-2022-26357—race in VT-d domain ID cleanup Xen domain IDs are up to 15 bits wide. VT-d hardware may allow for only less than 15 bits to hold a domain IDEPSS 0.2%CVE-2022-33748—lock order inversion in transitive grant copy handling As part of XSA-226 a missing cleanup call was inserted on an error handling path. WhiEPSS 0.2%CVE-2024-45818MEDIUMDeadlock in x86 HVM standard VGA handlingEPSS 0.2%CVE-2022-42315MEDIUMXenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/EPSS 0.2%CVE-2022-42313MEDIUMXenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/EPSS 0.2%CVE-2022-42316MEDIUMXenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/EPSS 0.2%CVE-2022-42318MEDIUMXenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/EPSS 0.2%CVE-2022-42312MEDIUMXenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/EPSS 0.2%CVE-2022-42314MEDIUMXenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/EPSS 0.2%CVE-2022-42311MEDIUMXenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/EPSS 0.2%CVE-2022-42317MEDIUMXenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/EPSS 0.2%CVE-2023-46837LOWarm32: The cache may not be properly cleaned/invalidated (take two)EPSS 0.2%CVE-2024-31146HIGHPCI device pass-through with shared resourcesEPSS 0.2%CVE-2024-31145HIGHerror handling in x86 IOMMU identity mappingEPSS 0.2%CVE-2022-26356—Racy interactions between dirty vram tracking and paging log dirty hypercalls Activation of log dirty mode done by XEN_DMOP_track_dirty_vramEPSS 0.2%CVE-2023-34322HIGHtop-level shadow reference dropped too early for 64-bit PV guestsEPSS 0.2%