Approved changes feed: RSS · Atom

cpe:2.3:o:xen:xen:4.4.2:*:*:*:*:*:*:*

part: o version: 4.4.2 update: *

VendorXen (f270236f-a538-5294-a46e-e4b9797d2f33)
ProductXen (6d9b47a4-a58a-5de1-b3a1-7ee0dccc27e6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/xen purl2cpe 2026-06-01 10:11:08.409906
pkg:deb/ubuntu/xen purl2cpe 2026-06-01 10:11:08.409908
pkg:github/mirage/xen purl2cpe 2026-06-01 10:11:08.409910
pkg:github/xen-project/xen purl2cpe 2026-06-01 10:11:08.409912
pkg:gitlab/xen-project/xen purl2cpe 2026-06-01 10:11:08.409914
pkg:rpm/fedora/xen purl2cpe 2026-06-01 10:11:08.409915
pkg:rpm/opensuse/xen purl2cpe 2026-06-01 10:11:08.409917
pkg:xen/xen purl2cpe 2026-06-01 10:11:08.409919

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-15596 vulnerable 2026-06-08 05:08:58.984101 Details available
An issue was discovered in Xen 4.4.x through 4.9.x allowing ARM guest OS users to cause a denial of service (prevent physical CPU usage) because of lock mishandling upon detection of an add-to-physmap error.
Published: 2017-10-18T08:00:00.000Z
Updated: 2024-08-05T19:57:27.243Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-14431 vulnerable 2026-06-08 05:08:49.949411 Details available
Memory leak in Xen 3.3 through 4.8.x allows guest OS users to cause a denial of service (ARM or x86 AMD host OS memory consumption) by continually rebooting, because certain cleanup is skipped if no pass-through device was ever assigned, aka XSA-207.
Published: 2017-09-13T22:00:00.000Z
Updated: 2024-08-05T19:27:40.593Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9932 vulnerable 2026-06-08 05:08:24.990923 Details available
CMPXCHG8B emulation in Xen 3.3.x through 4.7.x on x86 systems allows local HVM guest OS users to obtain sensitive information from host stack memory via a "supposedly-ignored" operand size prefix.
Published: 2017-01-26T15:00:00.000Z
Updated: 2024-08-06T03:07:31.379Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9385 vulnerable 2026-06-08 05:08:23.535218 Details available
The x86 segment base write emulation functionality in Xen 4.4.x through 4.7.x allows local x86 PV guest OS administrators to cause a denial of service (host crash) by leveraging lack of canonical address checks.
Published: 2017-01-23T21:00:00.000Z
Updated: 2024-08-06T02:50:37.058Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9382 vulnerable 2026-06-08 05:08:23.532524 Details available
Xen 4.0.x through 4.7.x mishandle x86 task switches to VM86 mode, which allows local 32-bit x86 HVM guest OS users to gain privileges or cause a denial of service (guest OS crash) by leveraging a guest operating system that uses hardware task switching and allows a new task to start in VM86 mode.
Published: 2017-01-23T21:00:00.000Z
Updated: 2024-08-06T02:50:36.977Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-7154 vulnerable 2026-06-08 05:08:11.972412 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5242 vulnerable 2026-06-08 05:07:56.523912 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4963 vulnerable 2026-06-08 05:07:55.790707 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4962 vulnerable 2026-06-08 05:07:55.775477 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-1571 vulnerable 2026-06-08 05:07:31.791600 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-1570 vulnerable 2026-06-08 05:07:31.783499 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8555 vulnerable 2026-06-08 05:07:04.360187 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8341 vulnerable 2026-06-08 05:07:03.643957 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8340 vulnerable 2026-06-08 05:07:03.643094 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8339 vulnerable 2026-06-08 05:07:03.641764 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8104 vulnerable 2026-06-08 05:07:03.179415 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7812 vulnerable 2026-06-08 05:07:01.992628 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-5307 vulnerable 2026-06-08 05:06:49.539170 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3340 vulnerable 2026-06-08 05:06:38.038335 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3259 vulnerable 2026-06-08 05:06:37.837438 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.