Approved changes feed: RSS · Atom

cpe:2.3:o:xen:xen:4.4.0:rc1:*:*:*:*:*:*

part: o version: 4.4.0 update: rc1

VendorXen (f270236f-a538-5294-a46e-e4b9797d2f33)
ProductXen (6d9b47a4-a58a-5de1-b3a1-7ee0dccc27e6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/xen purl2cpe 2026-06-01 10:11:08.375338
pkg:deb/ubuntu/xen purl2cpe 2026-06-01 10:11:08.375340
pkg:github/mirage/xen purl2cpe 2026-06-01 10:11:08.375341
pkg:github/xen-project/xen purl2cpe 2026-06-01 10:11:08.375343
pkg:gitlab/xen-project/xen purl2cpe 2026-06-01 10:11:08.375345
pkg:rpm/fedora/xen purl2cpe 2026-06-01 10:11:08.375347
pkg:rpm/opensuse/xen purl2cpe 2026-06-01 10:11:08.375348
pkg:xen/xen purl2cpe 2026-06-01 10:11:08.375350

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-15596 vulnerable 2026-06-08 05:08:58.979281 Details available
An issue was discovered in Xen 4.4.x through 4.9.x allowing ARM guest OS users to cause a denial of service (prevent physical CPU usage) because of lock mishandling upon detection of an add-to-physmap error.
Published: 2017-10-18T08:00:00.000Z
Updated: 2024-08-05T19:57:27.243Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-14431 vulnerable 2026-06-08 05:08:49.948263 Details available
Memory leak in Xen 3.3 through 4.8.x allows guest OS users to cause a denial of service (ARM or x86 AMD host OS memory consumption) by continually rebooting, because certain cleanup is skipped if no pass-through device was ever assigned, aka XSA-207.
Published: 2017-09-13T22:00:00.000Z
Updated: 2024-08-05T19:27:40.593Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5242 vulnerable 2026-06-08 05:07:56.523874 Details available
The p2m_teardown function in arch/arm/p2m.c in Xen 4.4.x through 4.6.x allows local guest OS users with access to the driver domain to cause a denial of service (NULL pointer dereference and host OS crash) by creating concurrent domains and holding references to them, related to VMID exhaustion.
Published: 2016-06-07T14:00:00.000Z
Updated: 2024-08-06T00:53:48.964Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4963 vulnerable 2026-06-08 05:07:55.790672 Details available
The libxl device-handling in Xen through 4.6.x allows local guest OS users with access to the driver domain to cause a denial of service (management tool confusion) by manipulating information in the backend directories in xenstore.
Published: 2016-06-07T14:00:00.000Z
Updated: 2024-08-06T00:46:40.035Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4962 vulnerable 2026-06-08 05:07:55.774440 Details available
The libxl device-handling in Xen 4.6.x and earlier allows local OS guest administrators to cause a denial of service (resource consumption or management facility confusion) or gain host OS privileges by manipulating information in guest controlled areas of xenstore.
Published: 2016-06-07T14:00:00.000Z
Updated: 2024-08-06T00:46:39.874Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-1571 vulnerable 2026-06-08 05:07:31.791564 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-1570 vulnerable 2026-06-08 05:07:31.782333 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7813 vulnerable 2026-06-08 05:07:01.995098 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7311 vulnerable 2026-06-08 05:07:00.399908 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4164 vulnerable 2026-06-08 05:06:39.296434 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-4163 vulnerable 2026-06-08 05:06:39.290828 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3259 vulnerable 2026-06-08 05:06:37.835995 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2751 vulnerable 2026-06-08 05:06:35.769875 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2151 vulnerable 2026-06-08 05:06:27.533920 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2150 vulnerable 2026-06-08 05:06:27.532467 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2045 vulnerable 2026-06-08 05:06:27.299843 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2044 vulnerable 2026-06-08 05:06:27.294953 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1563 vulnerable 2026-06-08 05:06:25.852407 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8866 vulnerable 2026-06-08 05:06:10.204263 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-7188 vulnerable 2026-06-08 05:05:58.874851 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-7156 vulnerable 2026-06-08 05:05:58.794486 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-7155 vulnerable 2026-06-08 05:05:58.793487 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-7154 vulnerable 2026-06-08 05:05:58.778714 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-6268 vulnerable 2026-06-08 05:05:56.939526 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5147 vulnerable 2026-06-08 05:05:47.035943 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4022 vulnerable 2026-06-08 05:05:43.895119 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-4021 vulnerable 2026-06-08 05:05:43.894694 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3969 vulnerable 2026-06-08 05:05:43.714387 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3968 vulnerable 2026-06-08 05:05:43.713976 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3967 vulnerable 2026-06-08 05:05:43.711497 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3717 vulnerable 2026-06-08 05:05:42.549604 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3716 vulnerable 2026-06-08 05:05:42.549217 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3715 vulnerable 2026-06-08 05:05:42.548820 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3714 vulnerable 2026-06-08 05:05:42.548324 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3125 vulnerable 2026-06-08 05:05:31.233531 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-3124 vulnerable 2026-06-08 05:05:31.233124 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2986 vulnerable 2026-06-08 05:05:30.591466 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2915 vulnerable 2026-06-08 05:05:30.338465 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-1896 vulnerable 2026-06-08 05:05:26.737968 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.