Xen Xen 4.2.4
Approved changes feed: RSS · Atom
cpe:2.3:o:xen:xen:4.2.4:*:*:*:*:*:*:*
part: o version: 4.2.4 update: *
| Vendor | Xen (f270236f-a538-5294-a46e-e4b9797d2f33) |
|---|---|
| Product | Xen (6d9b47a4-a58a-5de1-b3a1-7ee0dccc27e6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/xen |
purl2cpe | 2026-06-01 10:11:08.343656 |
pkg:deb/ubuntu/xen |
purl2cpe | 2026-06-01 10:11:08.343658 |
pkg:github/mirage/xen |
purl2cpe | 2026-06-01 10:11:08.343660 |
pkg:github/xen-project/xen |
purl2cpe | 2026-06-01 10:11:08.343662 |
pkg:gitlab/xen-project/xen |
purl2cpe | 2026-06-01 10:11:08.343663 |
pkg:rpm/fedora/xen |
purl2cpe | 2026-06-01 10:11:08.343665 |
pkg:rpm/opensuse/xen |
purl2cpe | 2026-06-01 10:11:08.343667 |
pkg:xen/xen |
purl2cpe | 2026-06-01 10:11:08.343669 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-14431 |
vulnerable | 2026-06-08 05:08:49.944062 |
Details available
Memory leak in Xen 3.3 through 4.8.x allows guest OS users to cause a denial of service (ARM or x86 AMD host OS memory consumption) by continually rebooting, because certain cleanup is skipped if no pass-through device was ever assigned, aka XSA-207.
Published: 2017-09-13T22:00:00.000Z
Updated: 2024-08-05T19:27:40.593Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-9932 |
vulnerable | 2026-06-08 05:08:24.990765 |
Details available
CMPXCHG8B emulation in Xen 3.3.x through 4.7.x on x86 systems allows local HVM guest OS users to obtain sensitive information from host stack memory via a "supposedly-ignored" operand size prefix.
Published: 2017-01-26T15:00:00.000Z
Updated: 2024-08-06T03:07:31.379Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-9382 |
vulnerable | 2026-06-08 05:08:23.527803 |
Details available
Xen 4.0.x through 4.7.x mishandle x86 task switches to VM86 mode, which allows local 32-bit x86 HVM guest OS users to gain privileges or cause a denial of service (guest OS crash) by leveraging a guest operating system that uses hardware task switching and allows a new task to start in VM86 mode.
Published: 2017-01-23T21:00:00.000Z
Updated: 2024-08-06T02:50:36.977Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-4963 |
vulnerable | 2026-06-08 05:07:55.789990 |
Details available
The libxl device-handling in Xen through 4.6.x allows local guest OS users with access to the driver domain to cause a denial of service (management tool confusion) by manipulating information in the backend directories in xenstore.
Published: 2016-06-07T14:00:00.000Z
Updated: 2024-08-06T00:46:40.035Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-1571 |
vulnerable | 2026-06-08 05:07:31.791427 |
Details available
The paging_invlpg function in include/asm-x86/paging.h in Xen 3.3.x through 4.6.x, when using shadow mode paging or nested virtualization is enabled, allows local HVM guest users to cause a denial of service (host crash) via a non-canonical guest address in an INVVPID instruction, which triggers a hypervisor bug check.
Published: 2016-01-22T15:00:00.000Z
Updated: 2024-08-05T23:02:11.683Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-1570 |
vulnerable | 2026-06-08 05:07:31.777939 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-8552 |
vulnerable | 2026-06-08 05:07:04.351775 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-8341 |
vulnerable | 2026-06-08 05:07:03.643811 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-8340 |
vulnerable | 2026-06-08 05:07:03.642949 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-8339 |
vulnerable | 2026-06-08 05:07:03.641008 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-3340 |
vulnerable | 2026-06-08 05:06:38.036573 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0361 |
vulnerable | 2026-06-08 05:06:21.324892 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.