Approved changes feed: RSS · Atom
cpe:2.3:o:xen:xen:4.6.2:*:*:*:*:*:*:*
part: o version: 4.6.2 update: *
| Vendor | Xen (f270236f-a538-5294-a46e-e4b9797d2f33) |
|---|---|
| Product | Xen (6d9b47a4-a58a-5de1-b3a1-7ee0dccc27e6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/xen |
purl2cpe | 2026-06-01 10:11:08.410573 |
pkg:deb/ubuntu/xen |
purl2cpe | 2026-06-01 10:11:08.410575 |
pkg:github/mirage/xen |
purl2cpe | 2026-06-01 10:11:08.410577 |
pkg:github/xen-project/xen |
purl2cpe | 2026-06-01 10:11:08.410579 |
pkg:gitlab/xen-project/xen |
purl2cpe | 2026-06-01 10:11:08.410581 |
pkg:rpm/fedora/xen |
purl2cpe | 2026-06-01 10:11:08.410582 |
pkg:rpm/opensuse/xen |
purl2cpe | 2026-06-01 10:11:08.410584 |
pkg:xen/xen |
purl2cpe | 2026-06-01 10:11:08.410586 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-8905 |
vulnerable | 2026-06-08 05:10:09.072600 |
Details available
Xen through 4.6.x on 64-bit platforms mishandles a failsafe callback, which might allow PV guest OS users to execute arbitrary code on the host OS, aka XSA-215.
Published: 2017-05-11T19:00:00.000Z
Updated: 2024-08-05T16:48:22.839Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-15596 |
vulnerable | 2026-06-08 05:08:58.994885 |
Details available
An issue was discovered in Xen 4.4.x through 4.9.x allowing ARM guest OS users to cause a denial of service (prevent physical CPU usage) because of lock mishandling upon detection of an add-to-physmap error.
Published: 2017-10-18T08:00:00.000Z
Updated: 2024-08-05T19:57:27.243Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-14431 |
vulnerable | 2026-06-08 05:08:49.951892 |
Details available
Memory leak in Xen 3.3 through 4.8.x allows guest OS users to cause a denial of service (ARM or x86 AMD host OS memory consumption) by continually rebooting, because certain cleanup is skipped if no pass-through device was ever assigned, aka XSA-207.
Published: 2017-09-13T22:00:00.000Z
Updated: 2024-08-05T19:27:40.593Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-10923 |
vulnerable | 2026-06-08 05:08:36.550399 |
Details available
Xen through 4.8.x does not validate a vCPU array index upon the sending of an SGI, which allows guest OS users to cause a denial of service (hypervisor crash), aka XSA-225.
Published: 2017-07-05T01:00:00.000Z
Updated: 2024-08-05T17:50:12.816Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-10916 |
vulnerable | 2026-06-08 05:08:36.545257 |
Details available
The vCPU context-switch implementation in Xen through 4.8.x improperly interacts with the Memory Protection Extensions (MPX) and Protection Key (PKU) features, which makes it easier for guest OS users to defeat ASLR and other protection mechanisms, aka XSA-220.
Published: 2017-07-05T01:00:00.000Z
Updated: 2024-08-05T17:50:12.652Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-8104 |
vulnerable | 2026-06-08 05:07:03.181417 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-5307 |
vulnerable | 2026-06-08 05:06:49.544380 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.