|
198971
|
10.0 |
CRITICAL
Network
|
xen
|
xen
|
The grant-table feature in Xen through 4.8.x does not ensure sufficient type counts for a GNTMAP_device_map and GNTMAP_host_map mapping, which allows guest OS users to cause a denial of service (coun…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-10921
|
2024-11-21 12:06 |
2017-07-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198972
|
10.0 |
CRITICAL
Network
|
xen
|
xen
|
The grant-table feature in Xen through 4.8.x mishandles a GNTMAP_device_map and GNTMAP_host_map mapping, when followed by only a GNTMAP_host_map unmapping, which allows guest OS users to cause a deni…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2017-10920
|
2024-11-21 12:06 |
2017-07-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198973
|
6.5 |
MEDIUM
Network
|
xen
|
xen
|
Xen through 4.8.x mishandles virtual interrupt injection, which allows guest OS users to cause a denial of service (hypervisor crash), aka XSA-223.
|
NVD-CWE-noinfo
|
CVE-2017-10919
|
2024-11-21 12:06 |
2017-07-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198974
|
10.0 |
CRITICAL
Network
|
xen
|
xen
|
Xen through 4.8.x does not validate memory allocations during certain P2M operations, which allows guest OS users to obtain privileged host OS access, aka XSA-222.
|
CWE-20
Improper Input Validation
|
CVE-2017-10918
|
2024-11-21 12:06 |
2017-07-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198975
|
9.1 |
CRITICAL
Network
|
xen
|
xen
|
Xen through 4.8.x does not validate the port numbers of polled event channel ports, which allows guest OS users to cause a denial of service (NULL pointer dereference and host OS crash) or possibly o…
|
CWE-476
NULL Pointer Dereference
|
CVE-2017-10917
|
2024-11-21 12:06 |
2017-07-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198976
|
7.5 |
HIGH
Network
|
xen
|
xen
|
The vCPU context-switch implementation in Xen through 4.8.x improperly interacts with the Memory Protection Extensions (MPX) and Protection Key (PKU) features, which makes it easier for guest OS user…
|
CWE-200
Information Exposure
|
CVE-2017-10916
|
2024-11-21 12:06 |
2017-07-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198977
|
9.0 |
CRITICAL
Network
|
xen
|
xen
|
The shadow-paging feature in Xen through 4.8.x mismanages page references and consequently introduces a race condition, which allows guest OS users to obtain Xen privileges, aka XSA-219.
|
CWE-362
Race Condition
|
CVE-2017-10915
|
2024-11-21 12:06 |
2017-07-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198978
|
8.1 |
HIGH
Network
|
xen
|
xen
|
The grant-table feature in Xen through 4.8.x has a race condition leading to a double free, which allows guest OS users to cause a denial of service (memory consumption), or possibly obtain sensitive…
|
CWE-362 CWE-415
Race Condition Double Free
|
CVE-2017-10914
|
2024-11-21 12:06 |
2017-07-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198979
|
9.8 |
CRITICAL
Network
|
xen
|
xen
|
The grant-table feature in Xen through 4.8.x provides false mapping information in certain cases of concurrent unmap calls, which allows backend attackers to obtain sensitive information or gain priv…
|
NVD-CWE-noinfo
|
CVE-2017-10913
|
2024-11-21 12:06 |
2017-07-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
198980
|
10.0 |
CRITICAL
Network
|
xen
|
xen
|
Xen through 4.8.x mishandles page transfer, which allows guest OS users to obtain privileged host OS access, aka XSA-217.
|
NVD-CWE-noinfo
|
CVE-2017-10912
|
2024-11-21 12:06 |
2017-07-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|