Xen Xen 3.2.3
Approved changes feed: RSS · Atom
cpe:2.3:o:xen:xen:3.2.3:*:*:*:*:*:*:*
part: o version: 3.2.3 update: *
| Vendor | Xen (f270236f-a538-5294-a46e-e4b9797d2f33) |
|---|---|
| Product | Xen (6d9b47a4-a58a-5de1-b3a1-7ee0dccc27e6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/xen |
purl2cpe | 2026-06-01 10:11:08.088056 |
pkg:deb/ubuntu/xen |
purl2cpe | 2026-06-01 10:11:08.088058 |
pkg:github/mirage/xen |
purl2cpe | 2026-06-01 10:11:08.088059 |
pkg:github/xen-project/xen |
purl2cpe | 2026-06-01 10:11:08.088060 |
pkg:gitlab/xen-project/xen |
purl2cpe | 2026-06-01 10:11:08.088062 |
pkg:rpm/fedora/xen |
purl2cpe | 2026-06-01 10:11:08.088063 |
pkg:rpm/opensuse/xen |
purl2cpe | 2026-06-01 10:11:08.088064 |
pkg:xen/xen |
purl2cpe | 2026-06-01 10:11:08.088066 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2015-8552 |
vulnerable | 2026-06-08 05:07:04.351314 |
Details available
The PCI backend driver in Xen, when running on an x86 system and using Linux 3.1.x through 4.3.x as the driver domain, allows local guest administrators to generate a continuous stream of WARN messages and cause a denial of service (disk consumption) by leveraging a system with access to a passed-through MSI or MSI-X capable physical PCI device and XEN_PCI_OP_enable_msi operations, aka "Linux pciback missing sanity checks."
Published: 2016-04-13T15:00:00.000Z
Updated: 2024-08-06T08:20:43.208Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-8340 |
vulnerable | 2026-06-08 05:07:03.642503 |
Details available
The memory_exchange function in common/memory.c in Xen 3.2.x through 4.6.x does not properly release locks, which might allow guest OS administrators to cause a denial of service (deadlock or host crash) via unspecified vectors, related to XENMEM_exchange error handling.
Published: 2015-12-17T19:00:00.000Z
Updated: 2024-08-06T08:13:32.279Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-8339 |
vulnerable | 2026-06-08 05:07:03.634446 |
Details available
The memory_exchange function in common/memory.c in Xen 3.2.x through 4.6.x does not properly hand back pages to a domain, which might allow guest OS administrators to cause a denial of service (host crash) via unspecified vectors related to domain teardown.
Published: 2015-12-17T19:00:00.000Z
Updated: 2024-08-06T08:13:32.299Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-7971 |
vulnerable | 2026-06-08 05:07:02.483872 |
Details available
Xen 3.2.x through 4.6.x does not limit the number of printk console messages when logging certain pmu and profiling hypercalls, which allows local guests to cause a denial of service via a sequence of crafted (1) HYPERCALL_xenoprof_op hypercalls, which are not properly handled in the do_xenoprof_op function in common/xenoprof.c, or (2) HYPERVISOR_xenpmu_op hypercalls, which are not properly handled in the do_xenpmu_op function in arch/x86/cpu/vpmu.c.
Published: 2015-10-30T15:00:00.000Z
Updated: 2024-08-06T08:06:31.461Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-4164 |
vulnerable | 2026-06-08 05:06:39.295893 |
Details available
The compat_iret function in Xen 3.1 through 4.5 iterates the wrong way through a loop, which allows local 32-bit PV guest administrators to cause a denial of service (large loop and system hang) via a hypercall_iret call with EFLAGS.VM set.
Published: 2015-06-15T15:00:00.000Z
Updated: 2024-08-06T06:04:02.939Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-2151 |
vulnerable | 2026-06-08 05:06:27.533455 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-2045 |
vulnerable | 2026-06-08 05:06:27.299370 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-2044 |
vulnerable | 2026-06-08 05:06:27.292874 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9030 |
vulnerable | 2026-06-08 05:06:10.661504 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-8867 |
vulnerable | 2026-06-08 05:06:10.207287 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-8595 |
vulnerable | 2026-06-08 05:06:09.677889 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-7155 |
vulnerable | 2026-06-08 05:05:58.786177 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-4021 |
vulnerable | 2026-06-08 05:05:43.888234 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-1893 |
vulnerable | 2026-06-08 05:05:26.727703 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-1891 |
vulnerable | 2026-06-08 05:05:26.714418 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4554 |
vulnerable | 2026-06-08 05:04:48.204730 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4368 |
vulnerable | 2026-06-08 05:04:35.773531 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4355 |
vulnerable | 2026-06-08 05:04:35.729888 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1920 |
vulnerable | 2026-06-08 05:03:57.272913 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-1917 |
vulnerable | 2026-06-08 05:03:57.265243 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-0231 |
vulnerable | 2026-06-08 05:03:46.242308 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5515 |
vulnerable | 2026-06-08 05:02:56.946193 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5514 |
vulnerable | 2026-06-08 05:02:56.945118 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5513 |
vulnerable | 2026-06-08 05:02:56.942334 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-2901 |
vulnerable | 2026-06-08 04:58:09.539177 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1166 |
vulnerable | 2026-06-08 04:57:56.312431 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.