XE
Product
Xenserver
50
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 6High 19Medium 12Low 0
Watch
Add Xenserver to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-3798 | 6.5 | Jul 11 | The Windows Guest Tools in Citrix XenServer 6.2 SP1 and earlier allows remote attackers to cause a denial of service (guest OS crash) via a crafted Ethernet frame Affected: 6.0; 6.0.2; 6.1.0; 6.2.0 |
| CVE-2017-5572 | 6.5 | Jan 30 | An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7.0 Affected: 6.0.2; 6.2.0; 6.5; 7.0 |
| CVE-2016-1571 | 6.3 | Jan 22 | The paging_invlpg function in include/asm-x86/paging.h in Xen 3.3.x through 4.6.x, when using shadow mode paging or nested virtualization is enabled, allows local HVM guest users… Affected: through 6.5 |
| CVE-2016-6259 | 6.2 | Aug 2 | Xen 4.5.x through 4.7.x do not implement Supervisor Mode Access Prevention (SMAP) whitelisting in 32-bit exception and event delivery, which allows local 32-bit PV guest OS… Affected: 6.0; 6.0.2; 6.1; 6.2.0; 6.5.0; 7.0 |
| CVE-2024-5661 | 6.0 | Jun 13 | An issue has been identified in both XenServer 8 and Citrix Hypervisor 8.2 CU1 LTSR which may allow a malicious administrator of a guest VM to cause the host to become slow and/or… Affected: 8.0 |
| CVE-2016-10024 | 6.0 | Jan 26 | Xen through 4.8.x allows local x86 PV guest OS kernel administrators to cause a denial of service (host hang or crash) by modifying the instruction stream asynchronously while… Affected: 6.0.2; 6.2.0; 6.5; 7.0 |
| CVE-2016-9385 | 6.0 | Jan 23 | The x86 segment base write emulation functionality in Xen 4.4.x through 4.7.x allows local x86 PV guest OS administrators to cause a denial of service (host crash) by leveraging… Affected: 6.0.2; 6.2.0; 6.5; 7.0 |
| CVE-2018-19965 | 5.6 | Dec 8 | An issue was discovered in Xen through 4.11.x allowing 64-bit PV guest OS users to cause a denial of service (host OS crash) because #GP[0] can occur after a non-canonical address… Affected: 7.0; 7.1; 7.5; 7.6 |
| CVE-2018-3665 | 5.6 | Jun 21 | System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially allow a local process to infer data from another… Affected: 7.0; 7.1; 7.3; 7.4; 7.5 |
| CVE-2016-10025 | 5.5 | Jan 26 | VMFUNC emulation in Xen 4.6.x through 4.8.x on x86 systems using AMD virtualization extensions (aka SVM) allows local HVM guest OS users to cause a denial of service (hypervisor… Affected: 6.0.2; 6.2.0; 6.5; 7.0 |
| CVE-2016-3712 | 5.5 | May 11 | Integer overflow in the VGA module in QEMU allows local guest OS users to cause a denial of service (out-of-bounds read and QEMU process crash) by editing VGA registers in VBE… Affected: through 7.0 |
| CVE-2017-5573 | 4.9 | Jan 30 | An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7.0 Affected: 6.0.2; 6.2.0; 6.5; 7.0 |
Showing 12