GCVE - cpe:2.3:a:citrix:xenserver:6.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:citrix:xenserver:6.0:*:*:*:*:*:*:*

part: a version: 6.0 update: *

Vendor	Citrix (`d4086e08-6d3e-5a9c-9da4-36397da0fc58`)
Product	Xenserver (`92fb2e89-e1af-535f-9389-02465a35f27c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2016-6259`	vulnerable	2026-06-08 05:07:59.303826	Details available Xen 4.5.x through 4.7.x do not implement Supervisor Mode Access Prevention (SMAP) whitelisting in 32-bit exception and event delivery, which allows local 32-bit PV guest OS kernels to cause a denial of service (hypervisor and VM crash) by triggering a safety check. Published: 2016-08-02T16:00:00.000Z Updated: 2024-08-06T01:22:20.659Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/92130 http://support.citrix.com/article/CTX214954 http://www.securitytracker.com/id/1036447 http://xenbits.xen.org/xsa/xsa183-unstable.patch http://xenbits.xen.org/xsa/advisory-183.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-6258`	vulnerable	2026-06-08 05:07:59.300536	Details available The PV pagetable code in arch/x86/mm.c in Xen 4.7.x and earlier allows local 32-bit PV guest OS administrators to gain host OS privileges by leveraging fast-paths for updating pagetable entries. Published: 2016-08-02T16:00:00.000Z Updated: 2024-08-06T01:22:20.664Z Open on db.gcve.eu Reference links http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html http://xenbits.xen.org/xsa/advisory-182.html http://xenbits.xen.org/xsa/xsa182-4.6.patch http://support.citrix.com/article/CTX214954 https://security.gentoo.org/glsa/201611-09	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-8555`	vulnerable	2026-06-08 05:07:04.359991	Details available Xen 4.6.x, 4.5.x, 4.4.x, 4.3.x, and earlier do not initialize x86 FPU stack and XMM registers when XSAVE/XRSTOR are not used to manage guest extended register state, which allows local guest domains to obtain sensitive information from other domains via unspecified vectors. Published: 2016-04-13T15:00:00.000Z Updated: 2024-08-06T08:20:43.162Z Open on db.gcve.eu Reference links http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html http://www.debian.org/security/2016/dsa-3519 http://www.securitytracker.com/id/1034477 http://www.securityfocus.com/bid/79543 http://xenbits.xen.org/xsa/advisory-165.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-4106`	vulnerable	2026-06-08 05:06:39.197590	Details available QEMU does not properly restrict write access to the PCI config space for certain PCI pass-through devices, which might allow local x86 HVM guests to gain privileges, cause a denial of service (host crash), obtain sensitive information, or possibly have other unspecified impact via unknown vectors. Published: 2015-06-03T20:00:00.000Z Updated: 2024-08-06T06:04:02.899Z Open on db.gcve.eu Reference links http://www.ubuntu.com/usn/USN-2630-1 https://support.citrix.com/article/CTX206006 http://www.debian.org/security/2015/dsa-3286 http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00029.html http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160154.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-3798`	vulnerable	2026-06-08 05:05:42.766578	Details available The Windows Guest Tools in Citrix XenServer 6.2 SP1 and earlier allows remote attackers to cause a denial of service (guest OS crash) via a crafted Ethernet frame. Published: 2019-07-11T19:14:08.000Z Updated: 2024-08-06T10:57:17.281Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1030304 http://www.securityfocus.com/bid/67693 http://support.citrix.com/article/CTX140814 http://secunia.com/advisories/58455	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4606`	vulnerable	2026-06-08 05:02:51.730381	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-3495`	vulnerable	2026-06-08 05:02:10.206220	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-0217`	vulnerable	2026-06-08 05:00:40.061807	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.