Approved changes feed: RSS · Atom

cpe:2.3:a:citrix:xenserver:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCitrix (d4086e08-6d3e-5a9c-9da4-36397da0fc58)
ProductXenserver (92fb2e89-e1af-535f-9389-02465a35f27c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-5661 vulnerable 2026-06-08 06:56:16.959143 Potential Denial of Service affecting XenServer and Citrix Hypervisor
An issue has been identified in both XenServer 8 and Citrix Hypervisor 8.2 CU1 LTSR which may allow a malicious administrator of a guest VM to cause the host to become slow and/or unresponsive.
Published: 2024-06-13T05:58:45.694Z
Updated: 2024-10-28T19:54:43.633Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5302 vulnerable 2026-06-08 05:07:56.660270 Details available
Citrix XenServer 7.0 before Hotfix XS70E003, when a deployment has been upgraded from an earlier release, might allow remote attackers on the management network to "compromise" a host by leveraging credentials for an Active Directory account.
Published: 2016-06-13T14:00:00.000Z
Updated: 2024-08-06T01:00:57.559Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3712 vulnerable 2026-06-08 05:07:45.853808 Details available
Integer overflow in the VGA module in QEMU allows local guest OS users to cause a denial of service (out-of-bounds read and QEMU process crash) by editing VGA registers in VBE mode.
Published: 2016-05-11T21:00:00.000Z
Updated: 2024-08-06T00:03:34.421Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3710 vulnerable 2026-06-08 05:07:45.848218 Details available
The VGA module in QEMU improperly performs bounds checking on banked access to video memory, which allows local guest OS administrators to execute arbitrary code on the host by changing access modes after setting the bank register, aka the "Dark Portal" issue.
Published: 2016-05-11T21:00:00.000Z
Updated: 2024-08-06T00:03:34.465Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3516 vulnerable 2026-06-08 05:02:10.450541 Details available
The GNTTABOP_swap_grant_ref sub-operation in the grant table hypercall in Xen 4.2 and Citrix XenServer 6.0.2 allows local guest kernels or administrators to cause a denial of service (host crash) and possibly gain privileges via a crafted grant reference that triggers a write to an arbitrary hypervisor memory location.
Published: 2012-11-23T20:00:00.000Z
Updated: 2024-08-06T20:05:12.797Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3498 vulnerable 2026-06-08 05:02:10.207984 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3496 vulnerable 2026-06-08 05:02:10.206929 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3495 vulnerable 2026-06-08 05:02:10.202909 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0217 vulnerable 2026-06-08 05:00:40.061035 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.