xen
496 tracked vulnerabilities.
CVE-2024-2193
MEDIUM
CPU <Speculative Execution - Info Disclosure
Mar 15, 2024
CVSS 5.7
EPSS 0.01
CVE-2023-46842
MEDIUM
Xen >= 3.2.0 - Denial of Service via Hypercall Continuation Type Confusion
May 16, 2024
CVSS 6.5
EPSS 0.02
CVE-2023-46841
MEDIUM
Recent x86 CPUs - Info Disclosure
Mar 20, 2024
CVSS 6.5
EPSS 0.00
CVE-2023-46840
MEDIUM
Xen >= 4.17 - Always-Incorrect Control Flow Implementation
Mar 20, 2024
CVSS 4.1
EPSS 0.00
CVE-2023-46839
MEDIUM
Xen - Unauthenticated PCI Device Assignment Flaw via Phantom Function Context Setup Failure
Mar 20, 2024
CVSS 5.3
EPSS 0.00
CVE-2023-46837
LOW
Xen < 4.16 - Memory Corruption via Cache Cleaning Helper Arithmetic Overflow
Jan 05, 2024
CVSS 3.3
EPSS 0.00
CVE-2023-46836
MEDIUM
Xen - Branch Type Confusion and Speculative Return Stack Overflow via IRQ Race Condition
Jan 05, 2024
CVSS 4.7
EPSS 0.00
CVE-2023-46835
MEDIUM
Quarantine Page Tables - Info Disclosure
Jan 05, 2024
CVSS 5.5
EPSS 0.00
CVE-2023-34328
MEDIUM
Xen 4.5.0-4.13.x - Denial of Service via Debug State Handling
Jan 05, 2024
CVSS 5.5
EPSS 0.00
CVE-2023-34327
MEDIUM
Xen >=4.5.0 - Denial of Service via Debug State Handling
Jan 05, 2024
CVSS 5.5
EPSS 0.00
CVE-2023-34326
HIGH
Xen - Use-After-Free via Stale DMA Mappings
Jan 05, 2024
CVSS 7.8
EPSS 0.00
CVE-2023-34325
HIGH
Xen - Out-of-bounds Write in libfsimage
Jan 05, 2024
CVSS 7.8
EPSS 0.00
CVE-2023-34324
MEDIUM
Linux Kernel < 5.10 - Deadlock via Event Channel Closure
Jan 05, 2024
CVSS 4.9
EPSS 0.00
CVE-2023-34323
MEDIUM
Xen < 4.17.0 - Denial of Service via Quota Assertion Failure
Jan 05, 2024
CVSS 5.5
EPSS 0.00
CVE-2023-34322
HIGH
xen 3.2.0-4.14.0 - Improper Check for Dropped Privileges in Shadow Paging Mode
Jan 05, 2024
CVSS 7.8
EPSS 0.00
CVE-2023-34321
LOW
Xen < 4.16 - Memory Corruption via Cache Helper Arithmetic Overflow
Jan 05, 2024
CVSS 3.3
EPSS 0.00
CVE-2023-34320
MEDIUM
ARM Cortex-A77 Firmware - Denial of Service via Improper Locking in PAR_EL1 Register Handling
Dec 08, 2023
CVSS 5.5
EPSS 0.00
CVE-2023-4949
HIGH
GRUB < 0.97 - Memory Corruption via XFS File System Implementation
Nov 10, 2023
CVSS 8.1
EPSS 0.00
CVE-2023-34319
HIGH
Xen >=3.2.0 and Linux Kernel 4.9.336-4.10 - Out-of-bounds Write in Netback Driver
Sep 22, 2023
CVSS 7.8
EPSS 0.00
CVE-2023-20588
MEDIUM
Debian Linux < 10.0.10240.20345 - Divide By Zero
Aug 08, 2023
CVSS 5.5
EPSS 0.07
CVE-2023-20593
MEDIUM
Xen - Information Disclosure via Zen 2 CPU Microarchitectural Side Channel
Jul 24, 2023
CVSS 5.5
EPSS 0.08
CVE-2022-40982
MEDIUM
Intel(R) Processors - Info Disclosure
Aug 11, 2023
CVSS 6.5
EPSS 0.01
CVE-2022-4949
HIGH
AdSanity < 1.8.2 - Authenticated Arbitrary File Upload via ajax_upload Function
Jun 07, 2023
CVSS 8.8
EPSS 0.09
CVE-2022-42336
LOW
Mishandling of guest SSBD selection on AMD - Info Disclosure
May 17, 2023
CVSS 3.3
EPSS 0.00
CVE-2022-42335
HIGH
Xen - Unauthenticated Arbitrary Pointer Dereference in Shadow Paging
Apr 25, 2023
CVSS 7.8
EPSS 0.00
Products
Quick Filters