DeutschShown in its original language — a full translation is planned for a future version.
Xen: Mehrere Schwachstellen
view advisory published 2022-06-14
Ein lokaler Angreifer kann mehrere Schwachstellen in Xen ausnutzen, um Informationen offenzulegen und einen Denial of Service Zustand herzustellen.
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-21180US | medium5.5 | — | ||
Improper input validation for some Intel(R) Processors may allow an authenticated user to potentially cause a denial of service via local access. | ||||
| CVE-2022-21166US | medium5.5 | — | ||
Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local… | ||||
| CVE-2022-21127US | medium5.5 | — | ||
Incomplete cleanup in specific special register read operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local… | ||||
| CVE-2022-21125US | medium5.5 | — | ||
Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. | ||||
| CVE-2022-21123US | medium5.5 | — | ||
Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. | ||||
| CVE-2022-21124US | high7.8 | — | ||
Out-of-bounds write vulnerability in CX-Programmer v9.76.1 and earlier which is a part of CX-One (v4.60) suite allows an attacker to cause information disclosure and/or arbitrary c… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2022:5937 vom 2022-08-09external
- Red Hat Security Advisory RHSA-2022:5939 vom 2022-08-09external
- Red Hat Security Advisory RHSA-2022:6537 vom 2022-09-20external
- Red Hat Security Advisory RHSA-2022:7280 vom 2022-11-01external
- Red Hat Bug-Tracker 2090226 vom 2022-12-13external
- AVAYA Security Advisory ASA-2022-113 vom 2022-08-16external
- Debian Security Advisory DSA-5184 vom 2022-07-15external
- SUSE Security Update SUSE-SU-2022:2557-1 vom 2022-07-27external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan