Approved changes feed: RSS · Atom

cpe:2.3:o:xen:xen:4.2.1:-:*:*:*:*:x86:*

part: o version: 4.2.1 update: -

VendorXen (f270236f-a538-5294-a46e-e4b9797d2f33)
ProductXen (6d9b47a4-a58a-5de1-b3a1-7ee0dccc27e6)
Edition*
Language*
Software edition*
Target software*
Target hardwarex86
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/xen purl2cpe 2026-06-01 10:11:08.343556
pkg:deb/ubuntu/xen purl2cpe 2026-06-01 10:11:08.343559
pkg:github/mirage/xen purl2cpe 2026-06-01 10:11:08.343561
pkg:github/xen-project/xen purl2cpe 2026-06-01 10:11:08.343563
pkg:gitlab/xen-project/xen purl2cpe 2026-06-01 10:11:08.343564
pkg:rpm/fedora/xen purl2cpe 2026-06-01 10:11:08.343566
pkg:rpm/opensuse/xen purl2cpe 2026-06-01 10:11:08.343568
pkg:xen/xen purl2cpe 2026-06-01 10:11:08.343570

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-7311 vulnerable 2026-06-08 05:07:00.392967 Details available
libxl in Xen 4.1.x through 4.6.x does not properly handle the readonly flag on disks when using the qemu-xen device model, which allows local guest users to write to a read-only disk image.
Published: 2015-10-01T20:00:00.000Z
Updated: 2024-08-06T07:43:46.158Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0151 vulnerable 2026-06-08 05:03:02.137502 Details available
The do_hvm_op function in xen/arch/x86/hvm/hvm.c in Xen 4.2.x on the x86_32 platform does not prevent HVM_PARAM_NESTEDHVM (aka nested virtualization) operations, which allows guest OS users to cause a denial of service (long-duration page mappings and host OS crash) by leveraging administrative access to an HVM guest in a domain with a large number of VCPUs.
Published: 2013-03-07T02:00:00.000Z
Updated: 2024-08-06T14:18:09.452Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.