[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fwJKObtCmH-0nzht6ePLiRqKb25Y6A3oiCabVpoKt78g":3,"g5a-ex:citrix\u002Fxen@*":161,"g5a-family:citrix\u002Fxen":163},{"success":4,"data":5},true,{"product":6,"versions":62,"topVulnerabilitiesByEpss":83,"kevVulnerabilities":138,"seoMetadata":139,"meta":158},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":61},"citrix","xen",20,9,0,"2011-08-19",[14,18,21,23,26,28,30,33,35,37,39,42,44,46,48,50,52,54,56,59],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"3.0.2",3,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"3.0.3",4,{"version":22,"cve_count":16,"kev_count":11,"has_kev":17},"3.0.4",{"version":24,"cve_count":25,"kev_count":11,"has_kev":17},"3.1.2",2,{"version":27,"cve_count":16,"kev_count":11,"has_kev":17},"3.1.3",{"version":29,"cve_count":16,"kev_count":11,"has_kev":17},"3.1.4",{"version":31,"cve_count":32,"kev_count":11,"has_kev":17},"3.2.0",5,{"version":34,"cve_count":16,"kev_count":11,"has_kev":17},"3.2.1",{"version":36,"cve_count":16,"kev_count":11,"has_kev":17},"3.2.2",{"version":38,"cve_count":16,"kev_count":11,"has_kev":17},"3.2.3",{"version":40,"cve_count":41,"kev_count":11,"has_kev":17},"3.3.0",6,{"version":43,"cve_count":16,"kev_count":11,"has_kev":17},"3.3.1",{"version":45,"cve_count":25,"kev_count":11,"has_kev":17},"3.3.2",{"version":47,"cve_count":25,"kev_count":11,"has_kev":17},"3.4.0",{"version":49,"cve_count":25,"kev_count":11,"has_kev":17},"3.4.1",{"version":51,"cve_count":25,"kev_count":11,"has_kev":17},"3.4.2",{"version":53,"cve_count":25,"kev_count":11,"has_kev":17},"3.4.3",{"version":55,"cve_count":20,"kev_count":11,"has_kev":17},"4.0.0",{"version":57,"cve_count":58,"kev_count":11,"has_kev":17},"4.0.1",1,{"version":60,"cve_count":16,"kev_count":11,"has_kev":17},"4.1.0","Xen by Citrix is a technology product with 20 tracked versions and 9 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":16,"kev_count":11,"has_kev":17},{"version":24,"cve_count":25,"kev_count":11,"has_kev":17},{"version":27,"cve_count":16,"kev_count":11,"has_kev":17},{"version":29,"cve_count":16,"kev_count":11,"has_kev":17},{"version":31,"cve_count":32,"kev_count":11,"has_kev":17},{"version":34,"cve_count":16,"kev_count":11,"has_kev":17},{"version":36,"cve_count":16,"kev_count":11,"has_kev":17},{"version":38,"cve_count":16,"kev_count":11,"has_kev":17},{"version":40,"cve_count":41,"kev_count":11,"has_kev":17},{"version":43,"cve_count":16,"kev_count":11,"has_kev":17},{"version":45,"cve_count":25,"kev_count":11,"has_kev":17},{"version":47,"cve_count":25,"kev_count":11,"has_kev":17},{"version":49,"cve_count":25,"kev_count":11,"has_kev":17},{"version":51,"cve_count":25,"kev_count":11,"has_kev":17},{"version":53,"cve_count":25,"kev_count":11,"has_kev":17},{"version":55,"cve_count":20,"kev_count":11,"has_kev":17},{"version":57,"cve_count":58,"kev_count":11,"has_kev":17},{"version":60,"cve_count":16,"kev_count":11,"has_kev":17},[84,92,99,105,111,116,123,128,133],{"cveId":85,"description":86,"publishedDate":87,"cvssScore":88,"cvssVersion":89,"severity":90,"isKev":17,"epssScore":91},"CVE-2008-4405","xend in Xen 3.0.3 does not properly limit the contents of the \u002Flocal\u002Fdomain xenstore directory tree, and does not properly restrict a guest VM's write access within this tree, which allows guest OS users to cause a denial of service and possibly have unspecified other impact by writing to (1) console\u002Ftty, (2) console\u002Flimit, or (3) image\u002Fdevice-model-pid.  NOTE: this issue was originally reported as an issue in libvirt 0.3.3 and xenstore, but CVE is considering the core issue to be related to Xen.","2008-10-03",7.2,"v2","High",0.01042,{"cveId":93,"description":94,"publishedDate":95,"cvssScore":96,"cvssVersion":89,"severity":97,"isKev":17,"epssScore":98},"CVE-2010-4238","The vbd_create function in Xen 3.1.2, when the Linux kernel 2.6.18 on Red Hat Enterprise Linux (RHEL) 5 is used, allows guest OS users to cause a denial of service (host OS panic) via an attempted access to a virtual CD-ROM device through the blkback driver.  NOTE: some of these details are obtained from third party information.","2011-01-22",5.5,"Medium",0.00891,{"cveId":100,"description":101,"publishedDate":102,"cvssScore":103,"cvssVersion":89,"severity":90,"isKev":17,"epssScore":104},"CVE-2011-1898","Xen 4.1 before 4.1.1 and 4.0 before 4.0.2, when using PCI passthrough on Intel VT-d chipsets that do not have interrupt remapping, allows guest OS users to gain host OS privileges by \"using DMA to generate MSI interrupts by writing to the interrupt injection registers.\"","2011-08-12",7.4,0.00852,{"cveId":106,"description":107,"publishedDate":108,"cvssScore":109,"cvssVersion":89,"severity":97,"isKev":17,"epssScore":110},"CVE-2010-4255","The fixup_page_fault function in arch\u002Fx86\u002Ftraps.c in Xen 4.0.1 and earlier on 64-bit platforms, when paravirtualization is enabled, does not verify that kernel mode is used to call the handle_gdt_ldt_mapping_fault function, which allows guest OS users to cause a denial of service (host OS BUG_ON) via a crafted memory access.","2011-01-25",6.1,0.00768,{"cveId":112,"description":113,"publishedDate":114,"cvssScore":96,"cvssVersion":89,"severity":97,"isKev":17,"epssScore":115},"CVE-2010-4247","The do_block_io_op function in (1) drivers\u002Fxen\u002Fblkback\u002Fblkback.c and (2) drivers\u002Fxen\u002Fblktap\u002Fblktap.c in Xen before 3.4.0 for the Linux kernel 2.6.18, and possibly other versions, allows guest OS users to cause a denial of service (infinite loop and CPU consumption) via a large production request index to the blkback or blktap back-end drivers.  NOTE: some of these details are obtained from third party information.","2011-01-11",0.00725,{"cveId":117,"description":118,"publishedDate":119,"cvssScore":120,"cvssVersion":89,"severity":121,"isKev":17,"epssScore":122},"CVE-2010-3699","The backend driver in Xen 3.x allows guest OS users to cause a denial of service via a kernel thread leak, which prevents the device and guest OS from being shut down or create a zombie domain, causes a hang in zenwatch, or prevents unspecified xm commands from working properly, related to (1) netback, (2) blkback, or (3) blktap.","2010-12-08",2.7,"Low",0.00714,{"cveId":124,"description":125,"publishedDate":102,"cvssScore":126,"cvssVersion":89,"severity":97,"isKev":17,"epssScore":127},"CVE-2011-1583","Multiple integer overflows in tools\u002Flibxc\u002Fxc_dom_bzimageloader.c in Xen 3.2, 3.3, 4.0, and 4.1 allow local users to cause a denial of service and possibly execute arbitrary code via a crafted paravirtualised guest kernel image that triggers (1) a buffer overflow during a decompression loop or (2) an out-of-bounds read in the loader involving unspecified length fields.",6.9,0.00705,{"cveId":129,"description":130,"publishedDate":131,"cvssScore":88,"cvssVersion":89,"severity":90,"isKev":17,"epssScore":132},"CVE-2008-5716","xend in Xen 3.3.0 does not properly restrict a guest VM's write access within the \u002Flocal\u002Fdomain xenstore directory tree, which allows guest OS users to cause a denial of service and possibly have unspecified other impact by writing to (1) console\u002Ftty, (2) console\u002Flimit, or (3) image\u002Fdevice-model-pid.  NOTE: this issue exists because of erroneous set_permissions calls in the fix for CVE-2008-4405.","2008-12-24",0.00358,{"cveId":134,"description":135,"publishedDate":12,"cvssScore":136,"cvssVersion":89,"severity":121,"isKev":17,"epssScore":137},"CVE-2011-3262","tools\u002Flibxc\u002Fxc_dom_bzimageloader.c in Xen 3.2, 3.3, 4.0, and 4.1 allows local users to cause a denial of service (management software infinite loop and management domain resource consumption) via unspecified vectors related to \"Lack of error checking in the decompression loop.\"",2.1,0.00334,[],{"title":140,"metaDescription":141,"keywords":142,"structuredData":143},"Xen by Citrix - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Xen by Citrix covering 20 versions with 9 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Xen vulnerabilities, Xen security, Xen CVE, Citrix Xen, Xen threat intelligence, Citrix security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":144,"@type":145,"name":146,"description":141,"url":147,"manufacturer":148,"applicationCategory":152,"softwareVersion":153,"mainEntity":154},"https:\u002F\u002Fschema.org","SoftwareApplication","Xen","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fcitrix\u002Fxen",{"@type":149,"name":150,"url":151},"Organization","Citrix","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fcitrix","Security Software","20 versions tracked",{"@type":155,"name":156,"description":157,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Xen Security Vulnerabilities","Security vulnerabilities affecting Xen by Citrix",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":159,"apiVersion":160},"2026-10-28T14:05:51.627Z","3.0",{"rows":162,"total":11,"capped":17,"failed":11},[],[]]