Approved changes feed: RSS · Atom

cpe:2.3:o:xen:xen:4.0.2:*:*:*:*:*:*:*

part: o version: 4.0.2 update: *

VendorXen (f270236f-a538-5294-a46e-e4b9797d2f33)
ProductXen (6d9b47a4-a58a-5de1-b3a1-7ee0dccc27e6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/xen purl2cpe 2026-06-01 10:11:08.113686
pkg:deb/ubuntu/xen purl2cpe 2026-06-01 10:11:08.113687
pkg:github/mirage/xen purl2cpe 2026-06-01 10:11:08.113689
pkg:github/xen-project/xen purl2cpe 2026-06-01 10:11:08.113690
pkg:gitlab/xen-project/xen purl2cpe 2026-06-01 10:11:08.113691
pkg:rpm/fedora/xen purl2cpe 2026-06-01 10:11:08.113693
pkg:rpm/opensuse/xen purl2cpe 2026-06-01 10:11:08.113694
pkg:xen/xen purl2cpe 2026-06-01 10:11:08.113695

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-14431 vulnerable 2026-06-08 05:08:49.936119 Details available
Memory leak in Xen 3.3 through 4.8.x allows guest OS users to cause a denial of service (ARM or x86 AMD host OS memory consumption) by continually rebooting, because certain cleanup is skipped if no pass-through device was ever assigned, aka XSA-207.
Published: 2017-09-13T22:00:00.000Z
Updated: 2024-08-05T19:27:40.593Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9932 vulnerable 2026-06-08 05:08:24.988474 Details available
CMPXCHG8B emulation in Xen 3.3.x through 4.7.x on x86 systems allows local HVM guest OS users to obtain sensitive information from host stack memory via a "supposedly-ignored" operand size prefix.
Published: 2017-01-26T15:00:00.000Z
Updated: 2024-08-06T03:07:31.379Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9382 vulnerable 2026-06-08 05:08:23.520117 Details available
Xen 4.0.x through 4.7.x mishandle x86 task switches to VM86 mode, which allows local 32-bit x86 HVM guest OS users to gain privileges or cause a denial of service (guest OS crash) by leveraging a guest operating system that uses hardware task switching and allows a new task to start in VM86 mode.
Published: 2017-01-23T21:00:00.000Z
Updated: 2024-08-06T02:50:36.977Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4963 vulnerable 2026-06-08 05:07:55.782162 Details available
The libxl device-handling in Xen through 4.6.x allows local guest OS users with access to the driver domain to cause a denial of service (management tool confusion) by manipulating information in the backend directories in xenstore.
Published: 2016-06-07T14:00:00.000Z
Updated: 2024-08-06T00:46:40.035Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8552 vulnerable 2026-06-08 05:07:04.351510 Details available
The PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x as the driver domain, allows local guest administrators to generate a continuous stream of WARN messages and cause a denial of service (disk consumption) by leveraging a system with access to a passed-through MSI or MSI-X capable physical PCI device and XEN_PCI_OP_enable_msi operations, aka "Linux pciback missing sanity checks."
Published: 2016-04-13T15:00:00.000Z
Updated: 2024-08-06T08:20:43.208Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8340 vulnerable 2026-06-08 05:07:03.642692 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8339 vulnerable 2026-06-08 05:07:03.634636 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7972 vulnerable 2026-06-08 05:07:02.486852 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7971 vulnerable 2026-06-08 05:07:02.485645 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7969 vulnerable 2026-06-08 05:07:02.476009 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7835 vulnerable 2026-06-08 05:07:02.038985 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4164 vulnerable 2026-06-08 05:06:39.296121 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4105 vulnerable 2026-06-08 05:06:39.188325 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4104 vulnerable 2026-06-08 05:06:39.187162 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4103 vulnerable 2026-06-08 05:06:39.181476 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2151 vulnerable 2026-06-08 05:06:27.533639 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2150 vulnerable 2026-06-08 05:06:27.532174 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2045 vulnerable 2026-06-08 05:06:27.299560 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2044 vulnerable 2026-06-08 05:06:27.294642 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1563 vulnerable 2026-06-08 05:06:25.845764 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9030 vulnerable 2026-06-08 05:06:10.661717 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8866 vulnerable 2026-06-08 05:06:10.195502 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8595 vulnerable 2026-06-08 05:06:09.682097 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8594 vulnerable 2026-06-08 05:06:09.666804 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-7155 vulnerable 2026-06-08 05:05:58.792172 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4021 vulnerable 2026-06-08 05:05:43.889809 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1893 vulnerable 2026-06-08 05:05:26.728004 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1892 vulnerable 2026-06-08 05:05:26.725845 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4554 vulnerable 2026-06-08 05:04:48.206574 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4553 vulnerable 2026-06-08 05:04:48.194669 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4368 vulnerable 2026-06-08 05:04:35.773818 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4361 vulnerable 2026-06-08 05:04:35.742017 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4355 vulnerable 2026-06-08 05:04:35.730119 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4329 vulnerable 2026-06-08 05:04:35.538472 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3495 vulnerable 2026-06-08 05:04:31.810565 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2212 vulnerable 2026-06-08 05:04:23.588281 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2211 vulnerable 2026-06-08 05:04:23.582019 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2078 vulnerable 2026-06-08 05:03:58.274778 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2077 vulnerable 2026-06-08 05:03:58.274254 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2076 vulnerable 2026-06-08 05:03:58.273644 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2072 vulnerable 2026-06-08 05:03:58.259666 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1964 vulnerable 2026-06-08 05:03:57.603203 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1952 vulnerable 2026-06-08 05:03:57.514572 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1920 vulnerable 2026-06-08 05:03:57.273100 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1917 vulnerable 2026-06-08 05:03:57.270796 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1442 vulnerable 2026-06-08 05:03:54.023609 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-6333 vulnerable 2026-06-08 05:02:59.941653 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5515 vulnerable 2026-06-08 05:02:56.946365 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5514 vulnerable 2026-06-08 05:02:56.945309 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5513 vulnerable 2026-06-08 05:02:56.944205 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5511 vulnerable 2026-06-08 05:02:56.933129 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5510 vulnerable 2026-06-08 05:02:56.932367 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4539 vulnerable 2026-06-08 05:02:51.322779 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4537 vulnerable 2026-06-08 05:02:51.321549 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4535 vulnerable 2026-06-08 05:02:51.315466 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-3432 vulnerable 2026-06-08 05:02:09.836775 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0217 vulnerable 2026-06-08 05:00:40.057158 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.