GCVE - cpe:2.3:a:citrix:xenserver:6.5:sp1:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:citrix:xenserver:6.5:sp1:*:*:*:*:*:*

part: a version: 6.5 update: sp1

Vendor	Citrix (`d4086e08-6d3e-5a9c-9da4-36397da0fc58`)
Product	Xenserver (`92fb2e89-e1af-535f-9389-02465a35f27c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-2620`	vulnerable	2026-06-08 05:09:24.787052	Details available MEDIUM (5.5) Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The issue could occur while copying VGA data in cirrus_bitblt_cputovideo. A privileged user inside guest could use this flaw to crash the QEMU process OR potentially execute arbitrary code on host with privileges of the QEMU process. Published: 2018-07-27T19:00:00.000Z Updated: 2024-08-05T14:02:07.311Z Open on db.gcve.eu Reference links http://rhn.redhat.com/errata/RHSA-2017-0329.html http://rhn.redhat.com/errata/RHSA-2017-0334.html http://www.securitytracker.com/id/1037870 http://rhn.redhat.com/errata/RHSA-2017-0328.html https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-2615`	vulnerable	2026-06-08 05:09:24.739939	Details available MEDIUM (5.5) Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue. It could occur while copying VGA data via bitblt copy in backward mode. A privileged user inside a guest could use this flaw to crash the QEMU process resulting in DoS or potentially execute arbitrary code on the host with privileges of QEMU process on the host. Published: 2018-07-02T18:00:00.000Z Updated: 2024-08-05T14:02:06.484Z Open on db.gcve.eu Reference links http://rhn.redhat.com/errata/RHSA-2017-0329.html http://rhn.redhat.com/errata/RHSA-2017-0334.html https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2615 http://www.securitytracker.com/id/1037804 http://rhn.redhat.com/errata/RHSA-2017-0328.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-9637`	vulnerable	2026-06-08 05:08:24.149096	Details available The (1) ioport_read and (2) ioport_write functions in Xen, when qemu is used as a device model within Xen, might allow local x86 HVM guest OS administrators to gain qemu process privileges via vectors involving an out-of-range ioport access. Published: 2017-02-16T18:00:00.000Z Updated: 2024-08-06T02:59:03.139Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/94699 https://security.gentoo.org/glsa/201612-56 https://support.citrix.com/article/CTX219136 https://lists.debian.org/debian-lts-announce/2018/02/msg00005.html http://xenbits.xen.org/xsa/advisory-199.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-9603`	vulnerable	2026-06-08 05:08:24.119940	Details available MEDIUM (5.5) A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support before 2.9; the issue could occur when a VNC client attempted to update its display after a VGA operation is performed by a guest. A privileged user/process inside a guest could use this flaw to crash the QEMU process or, potentially, execute arbitrary code on the host with privileges of the QEMU process. Published: 2018-07-27T21:00:00.000Z Updated: 2024-08-06T02:59:02.448Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/96893 https://access.redhat.com/errata/RHSA-2017:0983 https://access.redhat.com/errata/RHSA-2017:0982 https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html https://security.gentoo.org/glsa/201706-03	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.