Known vulnerabilities in xen (Debian package)

Vendor: Debian
Software CPE: cpe:2.3:o:debian:xen_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 125
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting xen (Debian package) xen (Debian package) is affected by 125 known vulnerabilities: 5 high, 54 medium, 66 low Critical High Medium Low

Vulnerabilities (125)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117653 - Permissions, Privileges, and Access Controls
CVE-2025-58149
CWE-264 Low
No
No
4.17.5+72-g01140da4e8-1, 4.20.2+7-g1badcf5035-0+deb13u1 24.10.2025 SB2025102474
SB20251024128
SB2025102501
and 8 more
#VU117433 - Out-of-bounds read
CVE-2025-58148
CWE-125 Medium
No
No
4.17.5+72-g01140da4e8-1, 4.20.2+7-g1badcf5035-0+deb13u1 21.10.2025 SB2025102166
SB2025102167
SB2025102242
and 11 more
#VU117432 - Out-of-bounds write
CVE-2025-58147
CWE-787 Medium
No
No
4.17.5+72-g01140da4e8-1, 4.20.2+7-g1badcf5035-0+deb13u1 21.10.2025 SB2025102166
SB2025102167
SB2025102242
and 11 more
#VU115008 - Permissions, Privileges, and Access Controls
CVE-2025-58145
CWE-264 Medium
No
No
4.17.5+72-g01140da4e8-1, 4.20.2+7-g1badcf5035-0+deb13u1 09.09.2025 SB2025090953
SB2025091618
SB2025091619
and 3 more
#VU115007 - NULL Pointer Dereference
CVE-2025-58144
CWE-476 Medium
No
No
4.17.5+72-g01140da4e8-1, 4.20.2+7-g1badcf5035-0+deb13u1 09.09.2025 SB2025090953
SB2025091618
SB2025091619
and 3 more
#VU115006 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-58143
CWE-362 Medium
No
No
4.17.5+72-g01140da4e8-1, 4.20.2+7-g1badcf5035-0+deb13u1 09.09.2025 SB2025090952
SB2025090955
SB2025091143
and 10 more
#VU115005 - NULL Pointer Dereference
CVE-2025-58142
CWE-476 Medium
No
No
4.17.5+72-g01140da4e8-1, 4.20.2+7-g1badcf5035-0+deb13u1 09.09.2025 SB2025090952
SB2025090955
SB2025091143
and 10 more
#VU115004 - NULL Pointer Dereference
CVE-2025-27466
CWE-476 Medium
No
No
4.17.5+72-g01140da4e8-1, 4.20.2+7-g1badcf5035-0+deb13u1 09.09.2025 SB2025090952
SB2025090955
SB2025091143
and 10 more
#VU112552 - Information Exposure through Microarchitectural State after Transient Execution
CVE-2024-36357
CWE-1342 Low
No
No
4.17.5+72-g01140da4e8-1, 4.20.2+7-g1badcf5035-0+deb13u1 08.07.2025 SB2025070882
SB2025070903
SB2025070904
and 43 more
#VU112549 - Information Exposure through Microarchitectural State after Transient Execution
CVE-2024-36350
CWE-1342 Low
No
No
4.17.5+72-g01140da4e8-1, 4.20.2+7-g1badcf5035-0+deb13u1 08.07.2025 SB2025070882
SB2025070903
SB2025070904
and 40 more
#VU112090 - Error Handling
CVE-2025-27465
CWE-388 Medium
No
No
4.17.5+72-g01140da4e8-1, 4.20.2+7-g1badcf5035-0+deb13u1 01.07.2025 SB2025070176
SB2025070285
SB2025080601
and 2 more
#VU109000 - Resource Management Errors
CVE-2024-28956
CWE-399 High
No
No
4.17.5+72-g01140da4e8-1, 4.20.2+7-g1badcf5035-0+deb13u1 13.05.2025 SB2025051308
SB2025051309
SB2025051320
and 46 more
#VU105104 - Deadlock
CVE-2025-1713
CWE-833 Medium
No
No
4.17.5+72-g01140da4e8-1, 4.20.2+7-g1badcf5035-0+deb13u1 27.02.2025 SB20250227233
SB2025022801
SB2025022802
and 7 more
#VU94499 - Improper Locking
CVE-2024-31143
CWE-667 Medium
No
No
4.17.5+23-ga4e5191dc0-1 17.07.2024 SB20240717125
SB2024073049
SB2024080547
and 5 more
#VU88374 - Processor optimization removal or modification of security-critical code
CVE-2024-2201
CWE-1037 Medium
No
No
4.17.5+23-ga4e5191dc0-1 10.04.2024 SB2024041029
SB2024041044
SB2024041045
and 67 more
#VU88372 - Type confusion
CVE-2024-31142
CWE-843 Low
No
No
4.17.5+23-ga4e5191dc0-1 10.04.2024 SB2024041027
SB2024041044
SB2024041045
and 11 more
#VU88228 - Improper input validation
CVE-2023-46842
CWE-20 Medium
No
No
4.17.5+23-ga4e5191dc0-1 09.04.2024 SB2024040941
SB2024041044
SB2024041045
and 13 more
#VU87457 - Exposure of sensitive information to an unauthorized actor
CVE-2023-28746
CWE-200 Low
No
No
4.17.5+23-ga4e5191dc0-1 12.03.2024 SB20240312343
SB20240312345
SB20240312357
and 51 more
#VU87374 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-2193
CWE-362 Low
No
No
4.17.5+23-ga4e5191dc0-1 12.03.2024 SB20240312315
SB2024031401
SB2024031501
and 13 more
#VU86860 - Resource Management Errors
CVE-2023-46841
CWE-399 Medium
No
No
4.17.5+23-ga4e5191dc0-1 27.02.2024 SB2024022774
SB2024022776
SB2024022801
and 4 more


Showing elements 1 - 20 out of 125