CVE search results

1 – 10 of 87 results

Detailed view

Sort by:

CVE-2013-2016

Low priority

Ignored

A flaw was found in the way qemu v1.3.0 and later (virtio-rng) validates addresses when guest accesses the config space of a virtio device. If the virtio device has zero/small sized config space, such as virtio-rng, a privileged...

6 affected packages

kvm, qemu, qemu-kvm, xen-3.1, xen-3.2, xen-3.3

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
kvm	—	—	—	—
qemu	—	—	—	—
qemu-kvm	—	—	—	—
xen-3.1	—	—	—	—
xen-3.2	—	—	—	—
xen-3.3	—	—	—	—

CVE-2013-1964

Medium priority

Some fixes available 2 of 5

Xen 4.0.x and 4.1.x incorrectly releases a grant reference when releasing a non-v1, non-transitive grant, which allows local guest administrators to cause a denial of service (host crash), obtain sensitive information, or possibly...

4 affected packages

xen, xen-3.1, xen-3.2, xen-3.3

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
xen	—	—	—	—
xen-3.1	—	—	—	—
xen-3.2	—	—	—	—
xen-3.3	—	—	—	—

CVE-2013-1952

Medium priority

Some fixes available 3 of 6

Xen 4.x, when using Intel VT-d for a bus mastering capable PCI device, does not properly check the source when accessing a bridge device’s interrupt remapping table entries for MSI interrupts, which allows local guest domains to...

4 affected packages

xen, xen-3.1, xen-3.2, xen-3.3

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
xen	—	—	—	—
xen-3.1	—	—	—	—
xen-3.2	—	—	—	—
xen-3.3	—	—	—	—

CVE-2013-1920

Medium priority

Ignored

Xen 4.2.x, 4.1.x, and earlier, when the hypervisor is running “under memory pressure” and the Xen Security Module (XSM) is enabled, uses the wrong ordering of operations when extending the per-domain event channel tracking table,...

4 affected packages

xen, xen-3.1, xen-3.2, xen-3.3

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
xen	—	—	—	—
xen-3.1	—	—	—	—
xen-3.2	—	—	—	—
xen-3.3	—	—	—	—

CVE-2013-1919

Medium priority

Some fixes available 3 of 6

Xen 4.2.x and 4.1.x does not properly restrict access to IRQs, which allows local stub domain clients to gain access to IRQs and cause a denial of service via vectors related to “passed-through IRQs or PCI devices.”

4 affected packages

xen, xen-3.1, xen-3.2, xen-3.3

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
xen	—	—	—	—
xen-3.1	—	—	—	—
xen-3.2	—	—	—	—
xen-3.3	—	—	—	—

CVE-2013-1918

Medium priority

Some fixes available 3 of 7

Certain page table manipulation operations in Xen 4.1.x, 4.2.x, and earlier are not preemptible, which allows local PV kernels to cause a denial of service via vectors related to “deep page table traversal.”

4 affected packages

xen, xen-3.1, xen-3.2, xen-3.3

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
xen	—	—	—	—
xen-3.1	—	—	—	—
xen-3.2	—	—	—	—
xen-3.3	—	—	—	—

CVE-2013-1917

Medium priority

Some fixes available 4 of 8

Xen 3.1 through 4.x, when running 64-bit hosts on Intel CPUs, does not clear the NT flag when using an IRET after a SYSENTER instruction, which allows PV guest users to cause a denial of service (hypervisor crash) by triggering a...

4 affected packages

xen, xen-3.1, xen-3.2, xen-3.3

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
xen	—	—	—	—
xen-3.1	—	—	—	—
xen-3.2	—	—	—	—
xen-3.3	—	—	—	—

CVE-2013-0215

Medium priority

Fixed

oxenstored in Xen 4.1.x, Xen 4.2.x, and xen-unstable does not properly consider the state of the Xenstore ring during read operations, which allows guest OS users to cause a denial of service (daemon crash and host-control outage,...

4 affected packages

xen, xen-3.1, xen-3.2, xen-3.3

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
xen	—	—	—	—
xen-3.1	—	—	—	—
xen-3.2	—	—	—	—
xen-3.3	—	—	—	—

CVE-2013-0154

Medium priority

Ignored

The get_page_type function in xen/arch/x86/mm.c in Xen 4.2, when debugging is enabled, allows local PV or HVM guest administrators to cause a denial of service (assertion failure and hypervisor crash) via unspecified...

4 affected packages

xen, xen-3.1, xen-3.2, xen-3.3

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
xen	—	—	—	—
xen-3.1	—	—	—	—
xen-3.2	—	—	—	—
xen-3.3	—	—	—	—

CVE-2013-0153

Medium priority

Some fixes available 5 of 6

The AMD IOMMU support in Xen 4.2.x, 4.1.x, 3.3, and other versions, when using AMD-Vi for PCI passthrough, uses the same interrupt remapping table for the host and all guests, which allows guests to cause a denial of service by...

4 affected packages

xen, xen-3.1, xen-3.2, xen-3.3

Package	24.04 LTS	22.04 LTS	20.04 LTS	18.04 LTS
xen	—	—	—	—
xen-3.1	—	—	—	—
xen-3.2	—	—	—	—
xen-3.3	—	—	—	—

Export to JSON

Results by page:

Search CVE reports