Approved changes feed: RSS · Atom

cpe:2.3:o:xen:xen:3.4.3:*:*:*:*:*:*:*

part: o version: 3.4.3 update: *

VendorXen (f270236f-a538-5294-a46e-e4b9797d2f33)
ProductXen (6d9b47a4-a58a-5de1-b3a1-7ee0dccc27e6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/xen purl2cpe 2026-06-01 10:11:08.088131
pkg:deb/ubuntu/xen purl2cpe 2026-06-01 10:11:08.088132
pkg:github/mirage/xen purl2cpe 2026-06-01 10:11:08.088134
pkg:github/xen-project/xen purl2cpe 2026-06-01 10:11:08.088135
pkg:gitlab/xen-project/xen purl2cpe 2026-06-01 10:11:08.088136
pkg:rpm/fedora/xen purl2cpe 2026-06-01 10:11:08.088138
pkg:rpm/opensuse/xen purl2cpe 2026-06-01 10:11:08.088139
pkg:xen/xen purl2cpe 2026-06-01 10:11:08.088140

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-14431 vulnerable 2026-06-08 05:08:49.934084 Details available
Memory leak in Xen 3.3 through 4.8.x allows guest OS users to cause a denial of service (ARM or x86 AMD host OS memory consumption) by continually rebooting, because certain cleanup is skipped if no pass-through device was ever assigned, aka XSA-207.
Published: 2017-09-13T22:00:00.000Z
Updated: 2024-08-05T19:27:40.593Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9932 vulnerable 2026-06-08 05:08:24.987864 Details available
CMPXCHG8B emulation in Xen 3.3.x through 4.7.x on x86 systems allows local HVM guest OS users to obtain sensitive information from host stack memory via a "supposedly-ignored" operand size prefix.
Published: 2017-01-26T15:00:00.000Z
Updated: 2024-08-06T03:07:31.379Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6258 vulnerable 2026-06-08 05:07:59.294767 Details available
The PV pagetable code in arch/x86/mm.c in Xen 4.7.x and earlier allows local 32-bit PV guest OS administrators to gain host OS privileges by leveraging fast-paths for updating pagetable entries.
Published: 2016-08-02T16:00:00.000Z
Updated: 2024-08-06T01:22:20.664Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-1571 vulnerable 2026-06-08 05:07:31.790647 Details available
The paging_invlpg function in include/asm-x86/paging.h in Xen 3.3.x through 4.6.x, when using shadow mode paging or nested virtualization is enabled, allows local HVM guest users to cause a denial of service (host crash) via a non-canonical guest address in an INVVPID instruction, which triggers a hypervisor bug check.
Published: 2016-01-22T15:00:00.000Z
Updated: 2024-08-05T23:02:11.683Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8552 vulnerable 2026-06-08 05:07:04.351441 Details available
The PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x as the driver domain, allows local guest administrators to generate a continuous stream of WARN messages and cause a denial of service (disk consumption) by leveraging a system with access to a passed-through MSI or MSI-X capable physical PCI device and XEN_PCI_OP_enable_msi operations, aka "Linux pciback missing sanity checks."
Published: 2016-04-13T15:00:00.000Z
Updated: 2024-08-06T08:20:43.208Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8340 vulnerable 2026-06-08 05:07:03.642624 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8339 vulnerable 2026-06-08 05:07:03.634568 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7972 vulnerable 2026-06-08 05:07:02.486677 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7971 vulnerable 2026-06-08 05:07:02.485574 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7970 vulnerable 2026-06-08 05:07:02.476906 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7835 vulnerable 2026-06-08 05:07:02.036873 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4164 vulnerable 2026-06-08 05:06:39.296052 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4105 vulnerable 2026-06-08 05:06:39.188261 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4104 vulnerable 2026-06-08 05:06:39.183597 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4103 vulnerable 2026-06-08 05:06:39.179881 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2151 vulnerable 2026-06-08 05:06:27.533573 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2150 vulnerable 2026-06-08 05:06:27.532097 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2045 vulnerable 2026-06-08 05:06:27.299494 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2044 vulnerable 2026-06-08 05:06:27.294570 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0777 vulnerable 2026-06-08 05:06:22.900556 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9030 vulnerable 2026-06-08 05:06:10.661642 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8866 vulnerable 2026-06-08 05:06:10.195429 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8595 vulnerable 2026-06-08 05:06:09.681494 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-7155 vulnerable 2026-06-08 05:05:58.790159 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1893 vulnerable 2026-06-08 05:05:26.727938 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1892 vulnerable 2026-06-08 05:05:26.722584 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1891 vulnerable 2026-06-08 05:05:26.718575 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4554 vulnerable 2026-06-08 05:04:48.206504 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4553 vulnerable 2026-06-08 05:04:48.192580 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4368 vulnerable 2026-06-08 05:04:35.773647 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4361 vulnerable 2026-06-08 05:04:35.741947 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4355 vulnerable 2026-06-08 05:04:35.730049 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-3495 vulnerable 2026-06-08 05:04:31.810489 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2212 vulnerable 2026-06-08 05:04:23.587708 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1920 vulnerable 2026-06-08 05:03:57.273033 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1917 vulnerable 2026-06-08 05:03:57.270198 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-6333 vulnerable 2026-06-08 05:02:59.941579 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5515 vulnerable 2026-06-08 05:02:56.946304 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5514 vulnerable 2026-06-08 05:02:56.945243 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5513 vulnerable 2026-06-08 05:02:56.944131 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-5511 vulnerable 2026-06-08 05:02:56.933062 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4537 vulnerable 2026-06-08 05:02:51.321481 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4535 vulnerable 2026-06-08 05:02:51.313168 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1166 vulnerable 2026-06-08 04:57:56.318645 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.