Skip to content
OpenAdvisories
Unscored DSA-3663-1 3 CVEs

xen - security update

Published Sep 9, 2016 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 xen 4.4.1-9+deb8u7

Vulnerabilities 3

  • Unscored —
    CVE-2016-7092

    The get_page_from_l3e function in arch/x86/mm.c in Xen allows local 32-bit PV guest OS administrators to gain host OS p…

    xen xen xen Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-7094

    Buffer overflow in Xen 4.7.x and earlier allows local x86 HVM guest OS administrators on guests running with shadow pag…

    xen xen xen Debian Ubuntu Alpine
  • Unscored —
    CVE-2016-7154

    Use-after-free vulnerability in the FIFO event channel code in Xen 4.4.x allows local guest OS administrators to cause …

    xen xen Debian Ubuntu