Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2008-1943

PVFB backend fails to validate frontend's framebuffer description

Buffer overflow in the backend of XenSource Xen Para Virtualized Frame Buffer (PVFB) 3.0 through 3.1.2 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a crafted description of a shared framebuffer.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Redhat Xensource
Products
Desktop Enterprise Linux Virtualization Server and 1 more
CVE-2008-1944

PVFB SDL backend chokes on bogus screen updates

Buffer overflow in the backend framebuffer of XenSource Xen Para-Virtualized Framebuffer (PVFB) Message 3.0 through 3.0.3 allows local users to cause a denial of service (SDL crash) and possibly execute arbitrary code via "bogus screen updates," related to missing validation of the "format of messages."

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Redhat Xensource
Products
Desktop Enterprise Linux Virtualization Server and 1 more
CVE-2008-1952

qemu/xen/kvm: ioemu: Fix PVFB backend to limit frame buffer size

The backend for XenSource Xen Para Virtualized Frame Buffer (PVFB) in Xen ioemu does not properly restrict the frame buffer size, which allows attackers to cause a denial of service (crash) by mapping an arbitrary amount of guest memory.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Redhat Xensource
Products
Enterprise Linux Xen Para Virtualized Frame Buffer
CVE-2010-2070

/kernel/security/CVE-2006-0742 test cause kernel-xen panic on ia64

arch/ia64/xen/faults.c in Xen 3.4 and 4.0 in Linux kernel 2.6.18, and possibly other kernel versions, when running on IA-64 architectures, allows local users to cause a denial of service and "turn on BE by modifying the user mask of the PSR," as demonstrated via exploitation of CVE-2006-0742.

CVSS 2.0 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat Xensource
Products
Enterprise Linux Xen