Approved changes feed: RSS · Atom

cpe:2.3:o:xen:xen:3.4.0:*:*:*:*:*:*:*

part: o version: 3.4.0 update: *

VendorXen (f270236f-a538-5294-a46e-e4b9797d2f33)
ProductXen (6d9b47a4-a58a-5de1-b3a1-7ee0dccc27e6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/xen purl2cpe 2026-06-01 10:11:08.088099
pkg:deb/ubuntu/xen purl2cpe 2026-06-01 10:11:08.088101
pkg:github/mirage/xen purl2cpe 2026-06-01 10:11:08.088102
pkg:github/xen-project/xen purl2cpe 2026-06-01 10:11:08.088103
pkg:gitlab/xen-project/xen purl2cpe 2026-06-01 10:11:08.088105
pkg:rpm/fedora/xen purl2cpe 2026-06-01 10:11:08.088106
pkg:rpm/opensuse/xen purl2cpe 2026-06-01 10:11:08.088107
pkg:xen/xen purl2cpe 2026-06-01 10:11:08.088109

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-14431 vulnerable 2026-06-08 05:08:49.932553 Details available
Memory leak in Xen 3.3 through 4.8.x allows guest OS users to cause a denial of service (ARM or x86 AMD host OS memory consumption) by continually rebooting, because certain cleanup is skipped if no pass-through device was ever assigned, aka XSA-207.
Published: 2017-09-13T22:00:00.000Z
Updated: 2024-08-05T19:27:40.593Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9932 vulnerable 2026-06-08 05:08:24.986292 Details available
CMPXCHG8B emulation in Xen 3.3.x through 4.7.x on x86 systems allows local HVM guest OS users to obtain sensitive information from host stack memory via a "supposedly-ignored" operand size prefix.
Published: 2017-01-26T15:00:00.000Z
Updated: 2024-08-06T03:07:31.379Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6258 vulnerable 2026-06-08 05:07:59.293645 Details available
The PV pagetable code in arch/x86/mm.c in Xen 4.7.x and earlier allows local 32-bit PV guest OS administrators to gain host OS privileges by leveraging fast-paths for updating pagetable entries.
Published: 2016-08-02T16:00:00.000Z
Updated: 2024-08-06T01:22:20.664Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-1571 vulnerable 2026-06-08 05:07:31.789223 Details available
The paging_invlpg function in include/asm-x86/paging.h in Xen 3.3.x through 4.6.x, when using shadow mode paging or nested virtualization is enabled, allows local HVM guest users to cause a denial of service (host crash) via a non-canonical guest address in an INVVPID instruction, which triggers a hypervisor bug check.
Published: 2016-01-22T15:00:00.000Z
Updated: 2024-08-05T23:02:11.683Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-1570 vulnerable 2026-06-08 05:07:31.770403 Details available
The PV superpage functionality in arch/x86/mm.c in Xen 3.4.0, 3.4.1, and 4.1.x through 4.6.x allows local PV guests to obtain sensitive information, cause a denial of service, gain privileges, or have unspecified other impact via a crafted page identifier (MFN) to the (1) MMUEXT_MARK_SUPER or (2) MMUEXT_UNMARK_SUPER sub-op in the HYPERVISOR_mmuext_op hypercall or (3) unknown vectors related to page table updates.
Published: 2016-01-22T15:00:00.000Z
Updated: 2024-08-05T23:02:11.689Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8552 vulnerable 2026-06-08 05:07:04.351388 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8340 vulnerable 2026-06-08 05:07:03.642572 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8339 vulnerable 2026-06-08 05:07:03.634517 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7972 vulnerable 2026-06-08 05:07:02.486614 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7971 vulnerable 2026-06-08 05:07:02.485512 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7970 vulnerable 2026-06-08 05:07:02.476846 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7835 vulnerable 2026-06-08 05:07:02.035002 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4164 vulnerable 2026-06-08 05:06:39.296001 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4105 vulnerable 2026-06-08 05:06:39.188213 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4104 vulnerable 2026-06-08 05:06:39.183546 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4103 vulnerable 2026-06-08 05:06:39.178402 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2151 vulnerable 2026-06-08 05:06:27.533520 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2150 vulnerable 2026-06-08 05:06:27.532041 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2045 vulnerable 2026-06-08 05:06:27.299441 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2044 vulnerable 2026-06-08 05:06:27.294500 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0777 vulnerable 2026-06-08 05:06:22.898909 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9030 vulnerable 2026-06-08 05:06:10.661586 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8866 vulnerable 2026-06-08 05:06:10.195376 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8595 vulnerable 2026-06-08 05:06:09.679980 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-7155 vulnerable 2026-06-08 05:05:58.788595 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1893 vulnerable 2026-06-08 05:05:26.727883 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1892 vulnerable 2026-06-08 05:05:26.722532 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1891 vulnerable 2026-06-08 05:05:26.716832 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4554 vulnerable 2026-06-08 05:04:48.206441 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4553 vulnerable 2026-06-08 05:04:48.191034 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4368 vulnerable 2026-06-08 05:04:35.773597 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4361 vulnerable 2026-06-08 05:04:35.741895 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4355 vulnerable 2026-06-08 05:04:35.729995 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3495 vulnerable 2026-06-08 05:04:31.810431 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2212 vulnerable 2026-06-08 05:04:23.586190 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1920 vulnerable 2026-06-08 05:03:57.272982 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1917 vulnerable 2026-06-08 05:03:57.268451 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-6333 vulnerable 2026-06-08 05:02:59.941512 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5515 vulnerable 2026-06-08 05:02:56.946256 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5514 vulnerable 2026-06-08 05:02:56.945192 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5513 vulnerable 2026-06-08 05:02:56.944067 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5511 vulnerable 2026-06-08 05:02:56.933002 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4537 vulnerable 2026-06-08 05:02:51.321420 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4535 vulnerable 2026-06-08 05:02:51.311653 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-0218 vulnerable 2026-06-08 05:00:40.064461 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1166 vulnerable 2026-06-08 04:57:56.316402 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.