Xen 4.7.1 R4
Approved changes feed: RSS · Atom
cpe:2.3:o:xen:xen:4.7.1:r4:*:*:*:*:*:*
part: o version: 4.7.1 update: r4
| Vendor | Xen (f270236f-a538-5294-a46e-e4b9797d2f33) |
|---|---|
| Product | Xen (6d9b47a4-a58a-5de1-b3a1-7ee0dccc27e6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/xen |
purl2cpe | 2026-06-01 10:11:08.411075 |
pkg:deb/ubuntu/xen |
purl2cpe | 2026-06-01 10:11:08.411077 |
pkg:github/mirage/xen |
purl2cpe | 2026-06-01 10:11:08.411078 |
pkg:github/xen-project/xen |
purl2cpe | 2026-06-01 10:11:08.411080 |
pkg:gitlab/xen-project/xen |
purl2cpe | 2026-06-01 10:11:08.411082 |
pkg:rpm/fedora/xen |
purl2cpe | 2026-06-01 10:11:08.411084 |
pkg:rpm/opensuse/xen |
purl2cpe | 2026-06-01 10:11:08.411086 |
pkg:xen/xen |
purl2cpe | 2026-06-01 10:11:08.411087 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-2620 |
vulnerable | 2026-06-08 05:09:24.787537 |
Details available
MEDIUM (5.5)
Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The issue could occur while copying VGA data in cirrus_bitblt_cputovideo. A privileged user inside guest could use this flaw to crash the QEMU process OR potentially execute arbitrary code on host with privileges of the QEMU process.
Published: 2018-07-27T19:00:00.000Z
Updated: 2024-08-05T14:02:07.311Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-2615 |
vulnerable | 2026-06-08 05:09:24.772742 |
Details available
MEDIUM (5.5)
Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue. It could occur while copying VGA data via bitblt copy in backward mode. A privileged user inside a guest could use this flaw to crash the QEMU process resulting in DoS or potentially execute arbitrary code on the host with privileges of QEMU process on the host.
Published: 2018-07-02T18:00:00.000Z
Updated: 2024-08-05T14:02:06.484Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.