Total vulnerabilities in the database
The HVMOP_inject_msi function in Xen 4.2.x, 4.3.x, and 4.4.x does not properly check the return value from the IRQ setup check, which allows local HVM guest administrators to cause a denial of service (NULL pointer dereference and crash) via unspecified vectors.
| Software | From | Fixed in |
|---|---|---|
| xen / xen | 4.2.2 | 4.2.2.x |
| xen / xen | 4.2.3 | 4.2.3.x |
| xen / xen | 4.2.0 | 4.2.0.x |
| xen / xen | 4.2.1 | 4.2.1.x |
| xen / xen | 4.4.0-rc1 | 4.4.0-rc1.x |
| xen / xen | 4.4.0 | 4.4.0.x |
| opensuse / opensuse | 12.3 | 12.3.x |
| opensuse / opensuse | 13.1 | 13.1.x |
| xen / xen | 4.3.0 | 4.3.0.x |
| xen / xen | 4.3.1 | 4.3.1.x |