Known vulnerabilities in xen - page 13

Software: xen
Software CPE: cpe:2.3:o:fedoraproject:xen:*:*:*:*:*:fedora:*:*
Total vulnerabilities: 347
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting xen xen is affected by 347 known vulnerabilities: 1 critical, 12 high, 121 medium, 213 low Critical High Medium Low

Vulnerabilities (347)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU11818 - Improper input validation
CVE-2017-13673
CWE-20 Low
No
No
4.7.3-6.fc25, 4.7.3-7.fc25, 4.8.2-3.fc26, 4.8.2-4.fc26, 4.9.0-11.fc27 11.04.2018 SB2018041304
SB2019032903
SB2018041048
and 5 more
#VU11644 - Out-of-bounds read
CVE-2017-13672
CWE-125 Low
No
No
4.7.3-6.fc25, 4.7.3-7.fc25, 4.8.2-3.fc26, 4.8.2-4.fc26, 4.9.0-11.fc27 10.04.2018 SB2018041005
SB2017120814
SB2017120815
and 12 more
#VU9452 - Resource exhaustion
CVE-2017-15595
CWE-400 Low
No
No
4.7.3-7.fc25, 4.7.3-9.fc25, 4.7.4-1.fc25, 4.8.2-4.fc26, 4.8.2-7.fc26, 4.8.2-9.fc26, 4.9.0-12.fc27, 4.9.0-14.fc27, 4.9.1-4.fc27 29.11.2017 SB2017112911
SB2017101211
SB2018021908
and 22 more
#VU9451 - Permissions, Privileges, and Access Controls
CVE-2017-15594
CWE-264 Low
No
No
4.7.3-7.fc25, 4.7.3-9.fc25, 4.7.4-1.fc25, 4.8.2-4.fc26, 4.9.0-12.fc27, 4.9.0-14.fc27 29.11.2017 SB2017112911
SB2017101211
SB2018010537
and 7 more
#VU9450 - Missing release of memory after effective lifetime
CVE-2017-15593
CWE-401 Low
No
No
4.7.3-7.fc25, 4.7.3-9.fc25, 4.7.4-1.fc25, 4.8.2-4.fc26, 4.9.0-12.fc27, 4.9.0-14.fc27 29.11.2017 SB2017112911
SB2017101211
SB2018010536
and 7 more
#VU9449 - Permissions, Privileges, and Access Controls
CVE-2017-15592
CWE-264 Low
No
No
4.7.3-7.fc25, 4.7.3-9.fc25, 4.7.4-1.fc25, 4.8.2-4.fc26, 4.8.2-7.fc26, 4.9.0-12.fc27, 4.9.0-14.fc27 29.11.2017 SB2017112911
SB2017101211
SB2017120814
and 12 more
#VU9446 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2017-15588
CWE-362 Low
No
No
4.7.3-7.fc25, 4.7.3-9.fc25, 4.7.4-1.fc25, 4.8.2-4.fc26, 4.9.0-12.fc27, 4.9.0-14.fc27 29.11.2017 SB2017112911
SB2017101211
SB2018010532
and 7 more
#VU8834 - Memory corruption
CVE-2017-15593
CWE-119 Low
No
No
4.7.3-7.fc25, 4.7.3-9.fc25, 4.7.4-1.fc25, 4.8.2-4.fc26, 4.9.0-12.fc27, 4.9.0-14.fc27 16.10.2017 SB2017101207
SB2018011406
SB2017101232
and 5 more
#VU8832 - Memory corruption
CVE-2017-15592
CWE-119 Low
No
No
4.7.3-7.fc25, 4.7.3-9.fc25, 4.7.4-1.fc25, 4.8.2-4.fc26, 4.8.2-7.fc26, 4.9.0-12.fc27, 4.9.0-14.fc27 16.10.2017 SB2017101207
SB2018011406
SB2017101232
and 6 more
#VU8831 - Permissions, Privileges, and Access Controls
CVE-2017-15594
CWE-264 Low
No
No
4.7.3-7.fc25, 4.7.3-9.fc25, 4.7.4-1.fc25, 4.8.2-4.fc26, 4.9.0-12.fc27, 4.9.0-14.fc27 16.10.2017 SB2017101207
SB2018011406
SB2017101232
and 5 more
#VU8829 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2017-15588
CWE-362 Low
No
No
4.7.3-7.fc25, 4.7.3-9.fc25, 4.7.4-1.fc25, 4.8.2-4.fc26, 4.9.0-12.fc27, 4.9.0-14.fc27 16.10.2017 SB2017101207
SB2018011406
SB2017101232
and 5 more
#VU8427 - Permissions, Privileges, and Access Controls
CVE-2017-14319
CWE-264 Low
No
No
4.7.3-5.fc25, 4.8.2-2.fc26, 4.9.0-10.fc27 14.09.2017 SB2017091402
SB2017092115
SB2017112911
and 8 more
#VU8426 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2017-14317
CWE-362 Low
No
No
4.7.3-5.fc25, 4.8.2-2.fc26, 4.9.0-10.fc27 14.09.2017 SB2017091402
SB2017092115
SB2017112911
and 8 more
#VU8425 - NULL Pointer Dereference
CVE-2017-14318
CWE-476 Low
No
No
4.7.3-5.fc25, 4.8.2-2.fc26, 4.9.0-10.fc27 14.09.2017 SB2017091402
SB2017092115
SB2017112911
and 7 more
#VU8424 - Out-of-bounds write
CVE-2017-14316
CWE-787 Low
No
No
4.7.3-5.fc25, 4.8.2-2.fc26, 4.9.0-10.fc27 14.09.2017 SB2017091402
SB2017092115
SB2017112911
and 8 more
#VU7500 - Permissions, Privileges, and Access Controls
CVE-2017-10913
CWE-264 Low
No
No
4.6.5-7.fc24, 4.7.2-7.fc25, 4.8.1-4.fc26 13.07.2017 SB2017062013
SB2017070803
SB2017101903
and 5 more
#VU7499 - Permissions, Privileges, and Access Controls
CVE-2017-10912
CWE-264 Low
No
No
4.6.5-7.fc24, 4.7.2-7.fc25, 4.8.1-4.fc26 13.07.2017 SB2017062013
SB2017070803
SB2017101903
and 5 more
#VU7146 - Exposure of sensitive information to an unauthorized actor
CVE-2017-10911
CWE-200 Low
No
No
4.6.5-7.fc24, 4.7.2-7.fc25, 4.8.1-4.fc26 21.06.2017 SB2017062108
SB2017080786
SB2017082005
and 3 more
#VU7145 - Permissions, Privileges, and Access Controls
CVE-2017-10912
CWE-264 Low
No
No
4.6.5-7.fc24, 4.7.2-7.fc25, 4.8.1-4.fc26 21.06.2017 SB2017062108
SB2017082005
SB2017062139
and 2 more
#VU7139 - Missing release of memory after effective lifetime
CVE-2017-10913
CWE-401 Low
No
No
4.6.5-7.fc24, 4.7.2-7.fc25, 4.8.1-4.fc26 21.06.2017 SB2017062108
SB2017082005
SB2017062139
and 2 more


Showing elements 241 - 260 out of 347