Approved changes feed: RSS · Atom
cpe:2.3:o:xen:xen:4.4.1:-:*:*:*:*:*:*
part: o version: 4.4.1 update: -
| Vendor | Xen (f270236f-a538-5294-a46e-e4b9797d2f33) |
|---|---|
| Product | Xen (6d9b47a4-a58a-5de1-b3a1-7ee0dccc27e6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/xen |
purl2cpe | 2026-06-01 10:11:08.409848 |
pkg:deb/ubuntu/xen |
purl2cpe | 2026-06-01 10:11:08.409851 |
pkg:github/mirage/xen |
purl2cpe | 2026-06-01 10:11:08.409852 |
pkg:github/xen-project/xen |
purl2cpe | 2026-06-01 10:11:08.409854 |
pkg:gitlab/xen-project/xen |
purl2cpe | 2026-06-01 10:11:08.409856 |
pkg:rpm/fedora/xen |
purl2cpe | 2026-06-01 10:11:08.409858 |
pkg:rpm/opensuse/xen |
purl2cpe | 2026-06-01 10:11:08.409860 |
pkg:xen/xen |
purl2cpe | 2026-06-01 10:11:08.409861 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2015-7972 |
vulnerable | 2026-06-08 05:07:02.487168 |
Details available
The (1) libxl_set_memory_target function in tools/libxl/libxl.c and (2) libxl__build_post function in tools/libxl/libxl_dom.c in Xen 3.4.x through 4.6.x do not properly calculate the balloon size when using the populate-on-demand (PoD) system, which allows local HVM guest users to cause a denial of service (guest crash) via unspecified vectors related to "heavy memory pressure."
Published: 2015-10-30T15:00:00.000Z
Updated: 2024-08-06T08:06:31.402Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-7971 |
vulnerable | 2026-06-08 05:07:02.485980 |
Details available
Xen 3.2.x through 4.6.x does not limit the number of printk console messages when logging certain pmu and profiling hypercalls, which allows local guests to cause a denial of service via a sequence of crafted (1) HYPERCALL_xenoprof_op hypercalls, which are not properly handled in the do_xenoprof_op function in common/xenoprof.c, or (2) HYPERVISOR_xenpmu_op hypercalls, which are not properly handled in the do_xenpmu_op function in arch/x86/cpu/vpmu.c.
Published: 2015-10-30T15:00:00.000Z
Updated: 2024-08-06T08:06:31.461Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-7969 |
vulnerable | 2026-06-08 05:07:02.476356 |
Details available
Multiple memory leaks in Xen 4.0 through 4.6.x allow local guest administrators or domains with certain permission to cause a denial of service (memory consumption) via a large number of "teardowns" of domains with the vcpu pointer array allocated using the (1) XEN_DOMCTL_max_vcpus hypercall or the xenoprofile state vcpu pointer array allocated using the (2) XENOPROF_get_buffer or (3) XENOPROF_set_passive hypercall.
Published: 2015-10-30T15:00:00.000Z
Updated: 2024-08-06T08:06:31.433Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-7835 |
vulnerable | 2026-06-08 05:07:02.042012 |
Details available
The mod_l2_entry function in arch/x86/mm.c in Xen 3.4 through 4.6.x does not properly validate level 2 page table entries, which allows local PV guest administrators to gain privileges via a crafted superpage mapping.
Published: 2015-10-30T15:00:00.000Z
Updated: 2024-08-06T07:58:59.983Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-7813 |
vulnerable | 2026-06-08 05:07:01.995118 |
Details available
Xen 4.4.x, 4.5.x, and 4.6.x does not limit the number of printk console messages when reporting unimplemented hypercalls, which allows local guests to cause a denial of service via a sequence of (1) HYPERVISOR_physdev_op hypercalls, which are not properly handled in the do_physdev_op function in arch/arm/physdev.c, or (2) HYPERVISOR_hvm_op hypercalls, which are not properly handled in the do_hvm_op function in arch/arm/hvm.c.
Published: 2015-10-30T15:00:00.000Z
Updated: 2024-08-06T07:58:59.987Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-7812 |
vulnerable | 2026-06-08 05:07:01.991242 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-7311 |
vulnerable | 2026-06-08 05:07:00.400458 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-4164 |
vulnerable | 2026-06-08 05:06:39.296450 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-4163 |
vulnerable | 2026-06-08 05:06:39.290845 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-4105 |
vulnerable | 2026-06-08 05:06:39.193648 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-4104 |
vulnerable | 2026-06-08 05:06:39.187489 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-4103 |
vulnerable | 2026-06-08 05:06:39.182815 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-2756 |
vulnerable | 2026-06-08 05:06:35.777365 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-2752 |
vulnerable | 2026-06-08 05:06:35.772211 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-2751 |
vulnerable | 2026-06-08 05:06:35.770405 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-2151 |
vulnerable | 2026-06-08 05:06:27.533938 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-2150 |
vulnerable | 2026-06-08 05:06:27.532485 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-2045 |
vulnerable | 2026-06-08 05:06:27.299859 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-2044 |
vulnerable | 2026-06-08 05:06:27.298455 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-7188 |
vulnerable | 2026-06-08 05:05:58.874869 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-7156 |
vulnerable | 2026-06-08 05:05:58.794504 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-7154 |
vulnerable | 2026-06-08 05:05:58.779650 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.