xen (SUSE:Manager Proxy 4.0) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Manager Proxy 4.0 package xen, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (14)

• CVE-2021-28697 — CVSS 7.8 (high): grant table v2 status pages may remain accessible after de-allocation Guest get permitted access to certain Xen-owned pages of memory. The…
• CVE-2021-28692 — CVSS 7.1 (high): inappropriate x86 IOMMU timeout detection / handling IOMMUs process commands issued to them in parallel with the operation of the CPU(s)…
• CVE-2021-28696 — CVSS 6.8 (medium): IOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities…
• CVE-2021-28694 — CVSS 6.8 (medium): IOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities…
• CVE-2021-28695 — CVSS 6.8 (medium): IOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities…
• CVE-2021-28690 — CVSS 6.5 (medium): x86: TSX Async Abort protections not restored after S3 This issue relates to the TSX Async Abort speculative security vulnerability. Please…
• CVE-2021-0089 — CVSS 6.5 (medium): Observable response discrepancy in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via…
• CVE-2021-3308 — CVSS 5.5 (medium): An issue was discovered in Xen 4.12.3 through 4.12.4 and 4.13.1 through 4.14.x. An x86 HVM guest with PCI pass through devices can force…
• CVE-2021-28687 — CVSS 5.5 (medium): HVM soft-reset crashes toolstack libxl requires all data structures passed across its public interface to be initialized before use and…
• CVE-2021-28693 — CVSS 5.5 (medium): xen/arm: Boot modules are not scrubbed The bootloader will load boot modules (e.g. kernel, initramfs...) in a temporary area before they…
• CVE-2021-28698 — CVSS 5.5 (medium): long running loops in grant table handling In order to properly monitor resource use, Xen maintains information on the grant mappings a…
• CVE-2021-28699 — CVSS 5.5 (medium): inadequate grant-v2 status frames array bounds check The v2 grant table interface separates grant attributes from grant status. That is…
• CVE-2021-28700 — CVSS 4.9 (medium): xen/arm: No memory limit for dom0less domUs The dom0less feature allows an administrator to create multiple unprivileged domains directly…
• CVE-2020-28368 — CVSS 4.4 (medium): Xen through 4.14.x allows guest OS administrators to obtain sensitive information (such as AES keys from outside the guest) via a…