Known vulnerabilities in xen - page 12

Software: xen
Software CPE: cpe:2.3:o:fedoraproject:xen:*:*:*:*:*:fedora:*:*
Total vulnerabilities: 347
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting xen xen is affected by 347 known vulnerabilities: 1 critical, 12 high, 121 medium, 213 low Critical High Medium Low

Vulnerabilities (347)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU12546 - NULL Pointer Dereference
CVE-2018-7542
CWE-476 Low
No
No
4.8.3-3.fc26, 4.9.1-5.fc27 10.05.2018 SB2018030401
SB2018051009
SB2018051201
and 4 more
#VU12542 - Out-of-bounds write
CVE-2018-10471
CWE-787 High
No
No
4.8.3-4.fc26, 4.9.2-2.fc27, 4.10.0-9.fc28 10.05.2018 SB2018051009
SB2018051010
SB2018051011
and 10 more
#VU12543 - Exposure of sensitive information to an unauthorized actor
CVE-2018-10472
CWE-200 Low
No
No
4.8.3-4.fc26, 4.9.2-2.fc27, 4.10.0-9.fc28 09.05.2018 SB2018051009
SB2018051010
SB2018051011
and 10 more
#VU12288 -
CVE-2018-10471
Low
No
No
4.8.3-4.fc26, 4.9.2-2.fc27, 4.10.0-9.fc28 30.04.2018 SB2018043006
SB2018042543
SB2018042544
and 1 more
#VU12287 - Exposure of sensitive information to an unauthorized actor
CVE-2018-10472
CWE-200 Low
No
No
4.8.3-4.fc26, 4.9.2-2.fc27, 4.10.0-9.fc28 28.04.2018 SB2018043006
SB2018042543
SB2018042544
and 1 more
#VU10780 - Resource exhaustion
CVE-2018-7540
CWE-400 Medium
No
No
4.8.3-3.fc26, 4.9.1-5.fc27 28.02.2018 SB2018022709
SB2018041017
SB2018030401
and 7 more
#VU10779 - Memory corruption
CVE-2018-7541
CWE-119 Low
No
No
4.8.3-3.fc26, 4.9.1-5.fc27 28.02.2018 SB2018022709
SB2018041017
SB2018030401
and 7 more
#VU10778 - NULL Pointer Dereference
CVE-2018-7542
CWE-476 Low
No
No
4.8.3-3.fc26, 4.9.1-5.fc27 28.02.2018 SB2018022709
SB2018022725
SB2018022728
#VU10616 - Error Handling
CVE-2017-17564
CWE-388 Low
No
No
4.8.2-9.fc26, 4.9.1-4.fc27 16.02.2018 SB2018010601
SB2018021606
SB2018021908
and 10 more
#VU10614 - Permissions, Privileges, and Access Controls
CVE-2017-17565
CWE-264 Low
No
No
4.8.2-9.fc26, 4.9.1-4.fc27 16.02.2018 SB2018010601
SB2018021606
SB2018021908
and 10 more
#VU10613 - Permissions, Privileges, and Access Controls
CVE-2017-17566
CWE-264 Low
No
No
4.8.2-9.fc26, 4.9.1-4.fc27 16.02.2018 SB2018010601
SB2018021606
SB2018021908
and 10 more
#VU10611 - Memory corruption
CVE-2017-17563
CWE-119 Low
No
No
4.8.2-9.fc26, 4.9.1-4.fc27 16.02.2018 SB2018010601
SB2018021606
SB2018021908
and 10 more
#VU9448 - Improper Access Control
CVE-2017-15590
CWE-284 Low
No
No
4.7.3-7.fc25, 4.7.3-9.fc25, 4.7.4-1.fc25, 4.8.2-4.fc26, 4.9.0-12.fc27, 4.9.0-14.fc27 29.11.2017 SB2017112911
SB2017101211
SB2018010534
and 7 more
#VU9447 - Missing release of memory after effective lifetime
CVE-2017-15589
CWE-401 Low
No
No
4.7.3-7.fc25, 4.7.3-9.fc25, 4.7.4-1.fc25, 4.8.2-4.fc26, 4.9.0-12.fc27, 4.9.0-14.fc27 29.11.2017 SB2017112911
SB2017101211
SB2018010533
and 7 more
#VU9442 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2017-17044
CWE-835 Low
No
No
4.8.2-8.fc26, 4.8.2-9.fc26, 4.9.1-2.fc27 29.11.2017 SB2017112904
SB2017122920
SB2018011406
and 4 more
#VU9435 - Permissions, Privileges, and Access Controls
CVE-2017-17045
CWE-264 Low
No
No
4.8.2-8.fc26, 4.8.2-9.fc26, 4.9.1-2.fc27 29.11.2017 SB2017112904
SB2017122921
SB2018011406
and 4 more
#VU8923 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2017-15597
CWE-362 Low
No
No
4.7.3-8.fc25, 4.8.2-5.fc26, 4.9.0-13.fc27 25.10.2017 SB2017102502
SB2017112911
SB2017112934
and 11 more
#VU8835 - Permissions, Privileges, and Access Controls
CVE-2017-15590
CWE-264 Low
No
No
4.7.3-7.fc25, 4.7.3-9.fc25, 4.7.4-1.fc25, 4.8.2-4.fc26, 4.9.0-12.fc27, 4.9.0-14.fc27 16.10.2017 SB2017101207
SB2018011406
SB2017101232
and 5 more
#VU8833 - Improper input validation
CVE-2017-15591
CWE-20 Low
No
No
4.7.3-7.fc25, 4.7.3-9.fc25, 4.7.4-1.fc25, 4.8.2-4.fc26, 4.9.0-12.fc27, 4.9.0-14.fc27 16.10.2017 SB2017101207
SB20180404120
SB2018011406
and 6 more
#VU8830 - Exposure of sensitive information to an unauthorized actor
CVE-2017-15589
CWE-200 Low
No
No
4.7.3-7.fc25, 4.7.3-9.fc25, 4.7.4-1.fc25, 4.8.2-4.fc26, 4.9.0-12.fc27, 4.9.0-14.fc27 16.10.2017 SB2017101207
SB2018011406
SB2017101232
and 5 more


Showing elements 221 - 240 out of 347