Approved changes feed: RSS · Atom

cpe:2.3:o:xen:xen:4.9.0:*:*:*:*:*:*:*

part: o version: 4.9.0 update: *

VendorXen (f270236f-a538-5294-a46e-e4b9797d2f33)
ProductXen (6d9b47a4-a58a-5de1-b3a1-7ee0dccc27e6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-15596 vulnerable 2026-06-08 05:08:59.004745 Details available
An issue was discovered in Xen 4.4.x through 4.9.x allowing ARM guest OS users to cause a denial of service (prevent physical CPU usage) because of lock mishandling upon detection of an add-to-physmap error.
Published: 2017-10-18T08:00:00.000Z
Updated: 2024-08-05T19:57:27.243Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-15591 vulnerable 2026-06-08 05:08:58.973827 Details available
An issue was discovered in Xen 4.5.x through 4.9.x allowing attackers (who control a stub domain kernel or tool stack) to cause a denial of service (host OS crash) because of a missing comparison (of range start to range end) within the DMOP map/unmap implementation.
Published: 2017-10-18T08:00:00.000Z
Updated: 2024-08-05T19:57:27.380Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-15590 vulnerable 2026-06-08 05:08:58.963616 Details available
An issue was discovered in Xen through 4.9.x allowing x86 guest OS users to cause a denial of service (hypervisor crash) or possibly gain privileges because MSI mapping was mishandled.
Published: 2017-10-18T08:00:00.000Z
Updated: 2024-08-05T19:57:27.055Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-15589 vulnerable 2026-06-08 05:08:58.963205 Details available
An issue was discovered in Xen through 4.9.x allowing x86 HVM guest OS users to obtain sensitive information from the host OS (or an arbitrary guest OS) because intercepted I/O operations can cause a write of data from uninitialized hypervisor stack memory.
Published: 2017-10-18T08:00:00.000Z
Updated: 2024-08-05T19:57:27.470Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-15588 vulnerable 2026-06-08 05:08:58.962690 Details available
An issue was discovered in Xen through 4.9.x allowing x86 PV guest OS users to execute arbitrary code on the host OS because of a race condition that can cause a stale TLB entry.
Published: 2017-10-18T08:00:00.000Z
Updated: 2024-08-05T19:57:27.063Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-14318 vulnerable 2026-06-08 05:08:49.614325 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-12855 vulnerable 2026-06-08 05:08:47.963035 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-12136 vulnerable 2026-06-08 05:08:45.347510 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.