Xensource Xen Vulnerabilities

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Version

4.4	26
4.2	24
4.3	18
4.5	18
4.4.x	16

Remediation

Official Fix	60
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	4

Exploitability

High	0
Functional	0
Proof-of-Concept	0
Unproven	34
Not Defined	30

Access Vector

Not Defined	0
Physical	0
Local	40
Adjacent	6
Network	18

Authentication

Not Defined	0
High	10
Low	24
None	30

User Interaction

Not Defined	0
Required	0
None	64

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	22
≤5	2
≤6	10
≤7	14
≤8	4
≤9	12
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	4
≤4	18
≤5	4
≤6	16
≤7	8
≤8	8
≤9	6
≤10	0

VulDB

≤1	0
≤2	0
≤3	0
≤4	22
≤5	2
≤6	10
≤7	14
≤8	0
≤9	16
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	2
≤6	6
≤7	8
≤8	2
≤9	10
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Vendor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	0
<2k	4
<5k	30
<10k	16
<25k	10
<50k	4
<100k	0
≥100k	0

Exploit Today

<1k	62
<2k	0
<5k	2
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit Market Volume

🔴 CTI Activities

Affected Versions (35): 3.2, 3.4, 3.4.1, 3.4.2, 3.4.3, 3.4.4, 4, 4.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.1, 4.1.1, 4.1.2, 4.1.3, 4.1.4, 4.1.5, 4.1.6.1, 4.2, 4.2.1, 4.2.2, 4.2.3, 4.3, 4.3.1, 4.3.2, 4.3.4, 4.4, 4.4.1, 4.5, 4.5.1, 4.5.3, 4.6, 4.6.3, 4.7

Link to Product Website: https://www.citrix.com/

Software Type: Virtualization Software

Published	Base	Temp	Vulnerability	0day	Today	Exp	Rem	CTI	CVE
10/04/2016	6.3	6.1	XenSource Xen CR0.EM/CR0.TS Memory race condition	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2016-7777
09/08/2016	6.7	6.4	XenSource Xen event_fifo.c cleanup_event_array use after free	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2016-7154
09/08/2016	4.1	3.9	XenSource Xen sh_ctxt memory corruption	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2016-7094
09/08/2016	8.2	7.8	XenSource Xen Instruction Pointer access control	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2016-7093
09/08/2016	8.2	7.8	XenSource Xen L3 Pagetable mm.c get_page_from_l3e access control	$0-$5k	$0-$5k	Not Defined	Official Fix	0.06	CVE-2016-7092
07/27/2016	5.5	5.3	XenSource Xen Virtio Request resource management	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2016-5403
07/26/2016	6.2	6.0	XenSource Xen SMAP Safety Check input validation	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2016-6259
07/26/2016	8.8	8.4	XenSource Xen PV Pagetable Updater Host access control	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2016-6258
06/07/2016	7.2	7.0	XenSource Xen Driver Domain p2m.c p2m_teardown null pointer dereference	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2016-5242
06/02/2016	4.7	4.5	XenSource Xen libxl access control	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2016-4963