Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 6

Export CSV
CVE-2007-4993

xen guest root can escape to domain 0 through pygrub

pygrub (tools/pygrub/src/GrubConf.py) in Xen 3.0.3, when booting a guest domain, allows local users with elevated privileges in the guest domain to execute arbitrary commands in domain 0 via a crafted grub.conf file whose contents are used in exec statements.

CVSS 2.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat Xensource Inc
Products
Enterprise Linux Xen
CVE-2007-5906

kernel-xen 3.1.1 virtual guest system denial of service (hypervisor crash) possibility

Xen 3.1.1 allows virtual guest system users to cause a denial of service (hypervisor crash) by using a debug register (DR7) to set certain breakpoints.

CVSS 2.0 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat Xensource Inc
Products
Enterprise Linux Xen
CVE-2007-5907

kernel-xen 3.1.1 does not prevent modification of the CR4 TSC from applications (DoS possible)

Xen 3.1.1 does not prevent modification of the CR4 TSC from applications, which allows pv guests to cause a denial of service (crash).

CVSS 2.0 · 4.7 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat Xensource Inc
Products
Enterprise Linux Xen
CVE-2007-6207

Security: some HVM domain can access another domain memory.

Xen 3.x, possibly before 3.1.2, when running on IA64 systems, does not check the RID value for mov_to_rr, which allows a VTi domain to read memory of other domains.

CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Vendors
Redhat Xensource Inc
Products
Enterprise Linux Xen
CVE-2008-1619

[xen-ia64] Dom0 panic while we run ftp test tool between HVM and Dom0.

The ssm_i emulation in Xen 5.1 on IA64 architectures allows attackers to cause a denial of service (dom0 panic) via certain traffic, as demonstrated using an FTP stress test tool.

CVSS 2.0 · 4.3 Medium EPSS 1.3% KEV · Not listed
Vendors
Redhat Xensource Inc
Products
Enterprise Linux Xen