DeutschShown in its original language — a full translation is planned for a future version.
Xen: Mehrere Schwachstellen
view advisory published 2021-11-23
Ein lokaler Angreifer kann mehrere Schwachstellen in Xen ausnutzen, um seine Privilegien zu erhöhen, beliebigen Programmcode auszuführen, Informationen offenzulegen oder einen Denial of Service Zustand herbeizuführen.
01
describes (7)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-28703US | high7.0 | — | ||
grant table v2 status pages may remain accessible after de-allocation (take two) Guest get permitted access to certain Xen-owned pages of memory. The majority of such pages remain… | ||||
| CVE-2021-28709US | high7.8 | — | ||
issues with partially successful P2M updates on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.]… | ||||
| CVE-2021-28705US | high7.8 | — | ||
issues with partially successful P2M updates on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.]… | ||||
| CVE-2021-28708US | high8.8 | — | ||
PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] x86 HVM and PVH g… | ||||
| CVE-2021-28707US | high8.8 | — | ||
PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] x86 HVM and PVH g… | ||||
| CVE-2021-28706US | high8.6 | — | ||
guests may exceed their designated memory limit When a guest is permitted to have close to 16TiB of memory, it may be able to issue hypercalls to increase its memory allocation bey… | ||||
| CVE-2021-28704US | high8.8 | — | ||
PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] x86 HVM and PVH g… | ||||
02
references
External citations — patches, advisories, analysis.
- SUSE Security Update SUSE-SU-2021:3851-1 vom 2021-12-01external
- SUSE Security Update SUSE-SU-2021:3849-1 vom 2021-12-01external
- SUSE Security Update SUSE-SU-2021:3842-1 vom 2021-12-01external
- SUSE Security Update SUSE-SU-2021:3852-1 vom 2021-12-01external
- SUSE Security Update SUSE-SU-2021:14848-1 vom 2021-12-01external
- SUSE Security Update SUSE-SU-2021:3888-1 vom 2021-12-03external
- SUSE Security Update SUSE-SU-2021:3968-1 vom 2021-12-07external
- SUSE Security Update SUSE-SU-2021:3977-1 vom 2021-12-09external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan