Approved changes feed: RSS · Atom
cpe:2.3:o:xen:xen:3.4.1:*:*:*:*:*:*:*
part: o version: 3.4.1 update: *
| Vendor | Xen (f270236f-a538-5294-a46e-e4b9797d2f33) |
|---|---|
| Product | Xen (6d9b47a4-a58a-5de1-b3a1-7ee0dccc27e6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/xen |
purl2cpe | 2026-06-01 10:11:08.088110 |
pkg:deb/ubuntu/xen |
purl2cpe | 2026-06-01 10:11:08.088111 |
pkg:github/mirage/xen |
purl2cpe | 2026-06-01 10:11:08.088113 |
pkg:github/xen-project/xen |
purl2cpe | 2026-06-01 10:11:08.088114 |
pkg:gitlab/xen-project/xen |
purl2cpe | 2026-06-01 10:11:08.088115 |
pkg:rpm/fedora/xen |
purl2cpe | 2026-06-01 10:11:08.088116 |
pkg:rpm/opensuse/xen |
purl2cpe | 2026-06-01 10:11:08.088118 |
pkg:xen/xen |
purl2cpe | 2026-06-01 10:11:08.088119 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-14431 |
vulnerable | 2026-06-08 05:08:49.933061 |
Details available
Memory leak in Xen 3.3 through 4.8.x allows guest OS users to cause a denial of service (ARM or x86 AMD host OS memory consumption) by continually rebooting, because certain cleanup is skipped if no pass-through device was ever assigned, aka XSA-207.
Published: 2017-09-13T22:00:00.000Z
Updated: 2024-08-05T19:27:40.593Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-9932 |
vulnerable | 2026-06-08 05:08:24.986836 |
Details available
CMPXCHG8B emulation in Xen 3.3.x through 4.7.x on x86 systems allows local HVM guest OS users to obtain sensitive information from host stack memory via a "supposedly-ignored" operand size prefix.
Published: 2017-01-26T15:00:00.000Z
Updated: 2024-08-06T03:07:31.379Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-1571 |
vulnerable | 2026-06-08 05:07:31.789249 |
Details available
The paging_invlpg function in include/asm-x86/paging.h in Xen 3.3.x through 4.6.x, when using shadow mode paging or nested virtualization is enabled, allows local HVM guest users to cause a denial of service (host crash) via a non-canonical guest address in an INVVPID instruction, which triggers a hypervisor bug check.
Published: 2016-01-22T15:00:00.000Z
Updated: 2024-08-05T23:02:11.683Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-1570 |
vulnerable | 2026-06-08 05:07:31.770986 |
Details available
The PV superpage functionality in arch/x86/mm.c in Xen 3.4.0, 3.4.1, and 4.1.x through 4.6.x allows local PV guests to obtain sensitive information, cause a denial of service, gain privileges, or have unspecified other impact via a crafted page identifier (MFN) to the (1) MMUEXT_MARK_SUPER or (2) MMUEXT_UNMARK_SUPER sub-op in the HYPERVISOR_mmuext_op hypercall or (3) unknown vectors related to page table updates.
Published: 2016-01-22T15:00:00.000Z
Updated: 2024-08-05T23:02:11.689Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-8552 |
vulnerable | 2026-06-08 05:07:04.351405 |
Details available
The PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x as the driver domain, allows local guest administrators to generate a continuous stream of WARN messages and cause a denial of service (disk consumption) by leveraging a system with access to a passed-through MSI or MSI-X capable physical PCI device and XEN_PCI_OP_enable_msi operations, aka "Linux pciback missing sanity checks."
Published: 2016-04-13T15:00:00.000Z
Updated: 2024-08-06T08:20:43.208Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-8340 |
vulnerable | 2026-06-08 05:07:03.642590 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-8339 |
vulnerable | 2026-06-08 05:07:03.634535 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-7972 |
vulnerable | 2026-06-08 05:07:02.486639 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-7971 |
vulnerable | 2026-06-08 05:07:02.485536 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-7970 |
vulnerable | 2026-06-08 05:07:02.476869 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-7835 |
vulnerable | 2026-06-08 05:07:02.035604 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-4164 |
vulnerable | 2026-06-08 05:06:39.296018 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-4105 |
vulnerable | 2026-06-08 05:06:39.188229 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-4104 |
vulnerable | 2026-06-08 05:06:39.183563 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-4103 |
vulnerable | 2026-06-08 05:06:39.178905 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-2151 |
vulnerable | 2026-06-08 05:06:27.533539 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-2150 |
vulnerable | 2026-06-08 05:06:27.532059 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-2045 |
vulnerable | 2026-06-08 05:06:27.299458 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-2044 |
vulnerable | 2026-06-08 05:06:27.294528 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0777 |
vulnerable | 2026-06-08 05:06:22.899545 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9030 |
vulnerable | 2026-06-08 05:06:10.661605 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-8866 |
vulnerable | 2026-06-08 05:06:10.195395 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-8595 |
vulnerable | 2026-06-08 05:06:09.680516 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-7155 |
vulnerable | 2026-06-08 05:05:58.789160 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-1893 |
vulnerable | 2026-06-08 05:05:26.727904 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-1892 |
vulnerable | 2026-06-08 05:05:26.722549 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-1891 |
vulnerable | 2026-06-08 05:05:26.717476 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4554 |
vulnerable | 2026-06-08 05:04:48.206464 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4553 |
vulnerable | 2026-06-08 05:04:48.191590 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4368 |
vulnerable | 2026-06-08 05:04:35.773614 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4361 |
vulnerable | 2026-06-08 05:04:35.741912 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4355 |
vulnerable | 2026-06-08 05:04:35.730013 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-3495 |
vulnerable | 2026-06-08 05:04:31.810448 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-2212 |
vulnerable | 2026-06-08 05:04:23.586713 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1920 |
vulnerable | 2026-06-08 05:03:57.272999 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1917 |
vulnerable | 2026-06-08 05:03:57.269173 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-6333 |
vulnerable | 2026-06-08 05:02:59.941538 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5515 |
vulnerable | 2026-06-08 05:02:56.946271 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5514 |
vulnerable | 2026-06-08 05:02:56.945208 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5513 |
vulnerable | 2026-06-08 05:02:56.944093 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5511 |
vulnerable | 2026-06-08 05:02:56.933025 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-4537 |
vulnerable | 2026-06-08 05:02:51.321444 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-4535 |
vulnerable | 2026-06-08 05:02:51.312199 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1166 |
vulnerable | 2026-06-08 04:57:56.317170 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.