Citrix Xen vulnerabilities

9 CVEs affecting Citrix Xen, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-3262, published 2011-08-19.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-4405, published 2008-10-03. High severity, CVSS 7.2. EPSS: 1% chance of exploitation in the next 30 days. xend in Xen 3.0.3 does not properly limit the contents of the /local/domain xenstore directory tree, and does not properly restrict a guest VM's write access within this tree, which allows guest OS…
CVE-2010-4238, published 2011-01-22. Medium severity, CVSS 5.5. EPSS: 0.9% chance of exploitation in the next 30 days. The vbd_create function in Xen 3.1.2, when the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5 is used, allows guest OS users to cause a denial of service (host OS panic) via an attempted…
CVE-2011-1898, published 2011-08-12. High severity, CVSS 7.4. EPSS: 0.9% chance of exploitation in the next 30 days. Xen 4.1 before 4.1.1 and 4.0 before 4.0.2, when using PCI passthrough on Intel VT-d chipsets that do not have interrupt remapping, allows guest OS users to gain host OS privileges by "using DMA to…
CVE-2010-4255, published 2011-01-25. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. The fixup_page_fault function in arch/x86/traps.c in Xen 4.0.1 and earlier on 64-bit platforms, when paravirtualization is enabled, does not verify that kernel mode is used to call the…
CVE-2010-4247, published 2011-01-11. Medium severity, CVSS 5.5. EPSS: 0.7% chance of exploitation in the next 30 days. The do_block_io_op function in (1) drivers/xen/blkback/blkback.c and (2) drivers/xen/blktap/blktap.c in Xen before 3.4.0 for the Linux kernel 2.6.18, and possibly other versions, allows guest OS…
CVE-2010-3699, published 2010-12-08. Low severity, CVSS 2.7. EPSS: 0.7% chance of exploitation in the next 30 days. The backend driver in Xen 3.x allows guest OS users to cause a denial of service via a kernel thread leak, which prevents the device and guest OS from being shut down or create a zombie domain,…
CVE-2011-1583, published 2011-08-12. Medium severity, CVSS 6.9. EPSS: 0.7% chance of exploitation in the next 30 days. Multiple integer overflows in tools/libxc/xc_dom_bzimageloader.c in Xen 3.2, 3.3, 4.0, and 4.1 allow local users to cause a denial of service and possibly execute arbitrary code via a crafted…
CVE-2008-5716, published 2008-12-24. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. xend in Xen 3.3.0 does not properly restrict a guest VM's write access within the /local/domain xenstore directory tree, which allows guest OS users to cause a denial of service and possibly have…
CVE-2011-3262, published 2011-08-19. Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days. tools/libxc/xc_dom_bzimageloader.c in Xen 3.2, 3.3, 4.0, and 4.1 allows local users to cause a denial of service (management software infinite loop and management domain resource consumption) via…