Approved changes feed: RSS · Atom

cpe:2.3:o:xen:xen:4.2.3:*:*:*:*:*:*:*

part: o version: 4.2.3 update: *

VendorXen (f270236f-a538-5294-a46e-e4b9797d2f33)
ProductXen (6d9b47a4-a58a-5de1-b3a1-7ee0dccc27e6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/xen purl2cpe 2026-06-01 10:11:08.343628
pkg:deb/ubuntu/xen purl2cpe 2026-06-01 10:11:08.343630
pkg:github/mirage/xen purl2cpe 2026-06-01 10:11:08.343632
pkg:github/xen-project/xen purl2cpe 2026-06-01 10:11:08.343633
pkg:gitlab/xen-project/xen purl2cpe 2026-06-01 10:11:08.343635
pkg:rpm/fedora/xen purl2cpe 2026-06-01 10:11:08.343637
pkg:rpm/opensuse/xen purl2cpe 2026-06-01 10:11:08.343639
pkg:xen/xen purl2cpe 2026-06-01 10:11:08.343640

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-14431 vulnerable 2026-06-08 05:08:49.943526 Details available
Memory leak in Xen 3.3 through 4.8.x allows guest OS users to cause a denial of service (ARM or x86 AMD host OS memory consumption) by continually rebooting, because certain cleanup is skipped if no pass-through device was ever assigned, aka XSA-207.
Published: 2017-09-13T22:00:00.000Z
Updated: 2024-08-05T19:27:40.593Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9932 vulnerable 2026-06-08 05:08:24.990741 Details available
CMPXCHG8B emulation in Xen 3.3.x through 4.7.x on x86 systems allows local HVM guest OS users to obtain sensitive information from host stack memory via a "supposedly-ignored" operand size prefix.
Published: 2017-01-26T15:00:00.000Z
Updated: 2024-08-06T03:07:31.379Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9382 vulnerable 2026-06-08 05:08:23.527255 Details available
Xen 4.0.x through 4.7.x mishandle x86 task switches to VM86 mode, which allows local 32-bit x86 HVM guest OS users to gain privileges or cause a denial of service (guest OS crash) by leveraging a guest operating system that uses hardware task switching and allows a new task to start in VM86 mode.
Published: 2017-01-23T21:00:00.000Z
Updated: 2024-08-06T02:50:36.977Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6258 vulnerable 2026-06-08 05:07:59.295579 Details available
The PV pagetable code in arch/x86/mm.c in Xen 4.7.x and earlier allows local 32-bit PV guest OS administrators to gain host OS privileges by leveraging fast-paths for updating pagetable entries.
Published: 2016-08-02T16:00:00.000Z
Updated: 2024-08-06T01:22:20.664Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4963 vulnerable 2026-06-08 05:07:55.789460 Details available
The libxl device-handling in Xen through 4.6.x allows local guest OS users with access to the driver domain to cause a denial of service (management tool confusion) by manipulating information in the backend directories in xenstore.
Published: 2016-06-07T14:00:00.000Z
Updated: 2024-08-06T00:46:40.035Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-1571 vulnerable 2026-06-08 05:07:31.791411 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-1570 vulnerable 2026-06-08 05:07:31.777427 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8552 vulnerable 2026-06-08 05:07:04.351756 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8341 vulnerable 2026-06-08 05:07:03.643794 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8340 vulnerable 2026-06-08 05:07:03.642933 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8339 vulnerable 2026-06-08 05:07:03.639786 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7972 vulnerable 2026-06-08 05:07:02.487067 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7971 vulnerable 2026-06-08 05:07:02.485873 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7969 vulnerable 2026-06-08 05:07:02.476243 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7835 vulnerable 2026-06-08 05:07:02.041896 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7311 vulnerable 2026-06-08 05:07:00.394255 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4164 vulnerable 2026-06-08 05:06:39.296350 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4163 vulnerable 2026-06-08 05:06:39.290620 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4104 vulnerable 2026-06-08 05:06:39.187388 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4103 vulnerable 2026-06-08 05:06:39.182703 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3340 vulnerable 2026-06-08 05:06:38.035020 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3259 vulnerable 2026-06-08 05:06:37.834941 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2151 vulnerable 2026-06-08 05:06:27.533856 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2150 vulnerable 2026-06-08 05:06:27.532396 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2045 vulnerable 2026-06-08 05:06:27.299774 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2044 vulnerable 2026-06-08 05:06:27.294879 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1563 vulnerable 2026-06-08 05:06:25.850645 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0361 vulnerable 2026-06-08 05:06:21.324376 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9030 vulnerable 2026-06-08 05:06:10.662159 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8866 vulnerable 2026-06-08 05:06:10.195724 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8595 vulnerable 2026-06-08 05:06:09.682325 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8594 vulnerable 2026-06-08 05:06:09.673719 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-7188 vulnerable 2026-06-08 05:05:58.874776 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-7156 vulnerable 2026-06-08 05:05:58.794416 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-7155 vulnerable 2026-06-08 05:05:58.793416 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-7154 vulnerable 2026-06-08 05:05:58.777507 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5149 vulnerable 2026-06-08 05:05:47.040653 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5146 vulnerable 2026-06-08 05:05:47.035492 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4021 vulnerable 2026-06-08 05:05:43.894618 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3968 vulnerable 2026-06-08 05:05:43.713907 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3967 vulnerable 2026-06-08 05:05:43.711426 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3124 vulnerable 2026-06-08 05:05:31.233052 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2599 vulnerable 2026-06-08 05:05:29.318330 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1950 vulnerable 2026-06-08 05:05:26.912176 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1896 vulnerable 2026-06-08 05:05:26.735694 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1895 vulnerable 2026-06-08 05:05:26.735198 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1891 vulnerable 2026-06-08 05:05:26.721875 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1666 vulnerable 2026-06-08 05:05:25.813552 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1642 vulnerable 2026-06-08 05:05:25.770644 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6400 vulnerable 2026-06-08 05:04:56.465921 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6375 vulnerable 2026-06-08 05:04:56.194209 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4554 vulnerable 2026-06-08 05:04:48.206792 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4553 vulnerable 2026-06-08 05:04:48.199302 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4551 vulnerable 2026-06-08 05:04:48.187062 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4416 vulnerable 2026-06-08 05:04:36.074178 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4375 vulnerable 2026-06-08 05:04:35.787705 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4371 vulnerable 2026-06-08 05:04:35.779164 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4370 vulnerable 2026-06-08 05:04:35.778809 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4369 vulnerable 2026-06-08 05:04:35.778434 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4368 vulnerable 2026-06-08 05:04:35.778000 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4355 vulnerable 2026-06-08 05:04:35.730455 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-4329 vulnerable 2026-06-08 05:04:35.541357 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1442 vulnerable 2026-06-08 05:03:54.026310 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.