{"id":"CVE-2015-8341","aliases":["DEBIAN-CVE-2015-8341","DSA-3519-1","EUVD-2015-8225","GHSA-qcgw-prmf-2x36","SUSE-SU-2015:2324-1","SUSE-SU-2015:2326-1","SUSE-SU-2015:2328-1","SUSE-SU-2015:2338-1","UBUNTU-CVE-2015-8341","openSUSE-SU-2024:10196-1"],"status":"published","title":"The libxl toolstack library in Xen 4.1.x through 4.6.x does not properly release mappings of...","description":"The libxl toolstack library in Xen 4.1.x through 4.6.x does not properly release mappings of files used as kernels and initial ramdisks when managing multiple domains in the same process, which allows attackers to cause a denial of service (memory and disk consumption) by starting domains.","severity":{"version":"2.0","score":7.8,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.02043,"percentile":0.81289,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-399"],"published":"2015-12-17T19:00:00Z","modified":"2026-09-09T06:47:21Z","fixes":[{"ecosystem":"Debian:12","package":"xen","fixed_in":["4.8.0~rc3-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"xen","fixed_in":["4.8.0~rc3-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"xen","fixed_in":["4.8.0~rc3-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"xen","fixed_in":["4.4.2-0ubuntu0.14.04.4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.0~rc3-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.0~rc3-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.8.0~rc3-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.1-9+deb8u4"}]}],"versions":["4.4.1-9","4.4.1-9+deb8u1","4.4.1-9+deb8u2","4.4.1-9+deb8u3"],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP1","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.2_02-4.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.2_02-4.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.2_02-4.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.2_02-4.1"}]}],"bundled":14},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP3","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.5_18-21.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP3","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.5_18-21.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.5_18-21.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.5_18-21.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP3","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.5_18-21.1"}]}],"bundled":12},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.3_06-22.15.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.3_06-22.15.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.3_06-22.15.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.3_06-22.15.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.3_06-29.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 11 SP4","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.3_06-29.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.3_06-29.1"}]}],"bundled":13},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.3_06-29.1"}]}],"bundled":13},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-0ubuntu0.14.04.4"}]}],"versions":["4.3.0-1ubuntu1","4.3.0-1ubuntu2","4.3.0-1ubuntu3","4.3.0-1ubuntu4","4.3.0-1ubuntu5","4.4.0-0ubuntu3","4.4.0-0ubuntu4","4.4.0-0ubuntu5","4.4.0-0ubuntu5.1","4.4.0-0ubuntu5.2","4.4.1-0ubuntu0.14.04.1","4.4.1-0ubuntu0.14.04.2","4.4.1-0ubuntu0.14.04.3","4.4.1-0ubuntu0.14.04.4","4.4.1-0ubuntu0.14.04.5","4.4.1-0ubuntu0.14.04.6","4.4.2-0ubuntu0.14.04.1","4.4.2-0ubuntu0.14.04.2","4.4.2-0ubuntu0.14.04.3"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.0_12-1.3"}]}],"bundled":124}],"products":[{"vendor":"xen","product":"xen"}],"references":[{"url":"http://www.debian.org/security/2016/dsa-3519","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://xenbits.xen.org/xsa/advisory-160.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","report"]},{"url":"http://www.securitytracker.com/id/1034389","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","web"]},{"url":"https://security.gentoo.org/glsa/201604-03","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8341"},{"url":"https://github.com/advisories/GHSA-qcgw-prmf-2x36"},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-8341","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20152324-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/947165","tags":["report"]},{"url":"https://bugzilla.suse.com/954018","tags":["report"]},{"url":"https://bugzilla.suse.com/954405","tags":["report"]},{"url":"https://bugzilla.suse.com/956408","tags":["report"]},{"url":"https://bugzilla.suse.com/956409","tags":["report"]},{"url":"https://bugzilla.suse.com/956411","tags":["report"]},{"url":"https://bugzilla.suse.com/956592","tags":["report"]},{"url":"https://bugzilla.suse.com/956832","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3259","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4106","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5154","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5239","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5307","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-6815","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7311","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7504","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7835","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8104","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8340","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8341","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8345","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20152326-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/950703","tags":["report"]},{"url":"https://bugzilla.suse.com/950704","tags":["report"]},{"url":"https://bugzilla.suse.com/950705","tags":["report"]},{"url":"https://bugzilla.suse.com/950706","tags":["report"]},{"url":"https://bugzilla.suse.com/951845","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7970","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7971","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7972","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20152328-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20152338-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/955399","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2015-8341","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8341","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1898","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0029","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-0217","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-2625","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3432","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-3433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4411","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4535","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4536","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4537","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4538","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4539","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-4544","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5510","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5513","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5514","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5515","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5525","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5634","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2012-6075","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0151","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0152","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-0153","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1442","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1917","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1918","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1919","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1922","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1952","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-2007","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4355","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4361","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4416","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4533","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4534","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4537","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4538","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4539","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4540","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4551","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4553","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4554","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0222","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3124","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3640","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3672","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5146","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-5149","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6268","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7154","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7155","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7156","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7188","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7815","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-1779","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3340","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3456","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4037","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4103","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4104","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4105","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5278","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-6855","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7549","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8504","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8550","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8554","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8555","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8558","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8567","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8568","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8613","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8615","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8619","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8743","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8744","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1568","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1570","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1714","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1922","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1981","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2198","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2270","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2271","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2391","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2538","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2841","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4439","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-4441","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5238","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5338","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6258","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6259","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-6351","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7092","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7093","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-7094","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2015-8341","description":"The libxl toolstack library in Xen 4.1.x through 4.6.x does not properly release mappings of files used as kernels and initial ramdisks when managing multiple domains in the same process, which allows attackers to cause a denial of service (memory and disk consumption) by starting domains.","status":"published","published":"2015-12-17T19:00:00Z","modified":"2024-08-06T08:13:32.258Z","updated_at":"2026-11-02T14:35:40.900357Z"}],"euvd":[{"id":"EUVD-2015-8225","description":"The libxl toolstack library in Xen 4.1.x through 4.6.x does not properly release mappings of files used as kernels and initial ramdisks when managing multiple domains in the same process, which allows attackers to cause a denial of service (memory and disk consumption) by starting domains.","status":"published","published":"2015-12-17T19:00:00Z","modified":"2024-08-06T08:13:32Z","updated_at":"2026-11-03T01:57:27.742981Z"}],"ghsa":[{"id":"GHSA-qcgw-prmf-2x36","title":"The libxl toolstack library in Xen 4.1.x through 4.6.x does not properly release mappings of...","description":"The libxl toolstack library in Xen 4.1.x through 4.6.x does not properly release mappings of files used as kernels and initial ramdisks when managing multiple domains in the same process, which allows attackers to cause a denial of service (memory and disk consumption) by starting domains.","status":"published","published":"2022-05-17T02:38:00Z","modified":"2023-01-27T05:05:20Z","updated_at":"2026-11-02T14:42:40.370534Z"}],"nvd":[{"id":"CVE-2015-8341","description":"The libxl toolstack library in Xen 4.1.x through 4.6.x does not properly release mappings of files used as kernels and initial ramdisks when managing multiple domains in the same process, which allows attackers to cause a denial of service (memory and disk consumption) by starting domains.","status":"published","published":"2015-12-17T19:59:09.73Z","modified":"2026-06-17T00:34:21.3Z","cvss":[{"version":"2.0","score":7.8,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-399"],"updated_at":"2026-11-02T14:03:14.501367Z"}],"osv":[{"id":"CVE-2015-8341","description":"The libxl toolstack library in Xen 4.1.x through 4.6.x does not properly release mappings of files used as kernels and initial ramdisks when managing multiple domains in the same process, which allows attackers to cause a denial of service (memory and disk consumption) by starting domains.","status":"published","published":"2015-12-17T19:59:09Z","modified":"2026-04-10T03:46:31.243759Z","updated_at":"2026-11-02T15:44:01.068991Z"},{"id":"DEBIAN-CVE-2015-8341","description":"The libxl toolstack library in Xen 4.1.x through 4.6.x does not properly release mappings of files used as kernels and initial ramdisks when managing multiple domains in the same process, which allows attackers to cause a denial of service (memory and disk consumption) by starting domains.","status":"published","published":"2015-12-17T19:59:09.73Z","modified":"2026-09-09T06:47:21.168473624Z","updated_at":"2026-11-02T15:45:27.04239Z"},{"id":"DSA-3519-1","title":"xen - security update","status":"published","published":"2016-03-17T00:00:00Z","modified":"2026-03-09T01:20:44.54829Z","updated_at":"2026-11-02T15:46:16.199525Z"},{"id":"openSUSE-SU-2024:10196-1","title":"xen-4.7.0_12-1.3 on GA media","description":"These are all security issues fixed in the xen-4.7.0_12-1.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:08:39.408456Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"SUSE-SU-2015:2324-1","title":"Security update for xen","description":"\n\nThis update fixes the following security issues:\n\n- bsc#956832 -  CVE-2015-8345: xen: qemu: net: eepro100: infinite loop in processing command block list\n\n- Revert x86/IO-APIC: don't create pIRQ mapping from masked RTE until kernel maintenance release goes out.\n\n- bsc#956592 -  xen: virtual PMU is unsupported (XSA-163)\n\n- bsc#956408 -  CVE-2015-8339, CVE-2015-8340: xen: XENMEM_exchange error handling issues (XSA-159)\n\n- bsc#956409 -  CVE-2015-8341: xen: libxl leak of pv kernel and initrd on error (XSA-160)\n\n- bsc#956411 -  CVE-2015-7504: xen: heap buffer overflow vulnerability in pcnet emulator (XSA-162)\n\n- bsc#947165 -  CVE-2015-7311: xen: libxl fails to honour readonly flag on disks with qemu-xen (xsa-142)\n\n- bsc#954405 -  CVE-2015-8104: Xen: guest to host DoS by triggering an infinite loop in microcode via #DB exception\n\n- bsc#954018 -  CVE-2015-5307: xen: x86: CPU lockup during fault delivery (XSA-156)\n","status":"published","published":"2015-12-19T11:25:39Z","modified":"2026-02-04T03:46:38.891811Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:2326-1","title":"Security update for xen","description":"\n\nThis update fixes the following security issues:\n      \n- bsc#956832 -  CVE-2015-8345: xen: qemu: net: eepro100:\n  infinite loop in processing command block list\n\n- bsc#956592 -  xen: virtual PMU is unsupported (XSA-163)\n\n- bsc#956408 -  CVE-2015-8339, CVE-2015-8340: xen:\n  XENMEM_exchange error handling issues (XSA-159)\n\n- bsc#956409 -  CVE-2015-8341: xen: libxl leak of pv kernel\n  and initrd on error (XSA-160)\n\n- bsc#956411 -  CVE-2015-7504: xen: heap buffer overflow\n  vulnerability in pcnet emulator (XSA-162)\n\n- bsc#947165 -  CVE-2015-7311: xen: libxl fails to honour\n  readonly flag on disks with qemu-xen (xsa-142)\n\n- bsc#954405 -  CVE-2015-8104: Xen: guest to host DoS by\n  triggering an infinite loop in microcode via #DB exception\n- bsc#954018 -  CVE-2015-5307: xen: x86: CPU lockup during\n  fault delivery (XSA-156)\n\n- bsc#950704 -  CVE-2015-7970: xen: x86: Long latency\n  populate-on-demand operation is not preemptible (XSA-150)\n\n- bsc#951845 -  CVE-2015-7972: xen: x86: populate-on-demand\n  balloon size inaccuracy can crash guests (XSA-153)\n\n- bsc#950703 -  CVE-2015-7969: xen: leak of main per-domain\n  vcpu pointer array (DoS) (XSA-149)\n- bsc#950705 -  CVE-2015-7969: xen: x86: leak of per-domain\n  profiling-related vcpu pointer array (DoS) (XSA-151)\n- bsc#950706 -  CVE-2015-7971: xen: x86: some pmu and\n  profiling hypercalls log without rate limiting (XSA-152)","status":"published","published":"2015-12-19T11:25:04Z","modified":"2026-02-04T02:58:29.792142Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:2328-1","title":"Security update for xen","description":"\n\nThis update fixes the following security issues:\n\n- bsc#956832 -  CVE-2015-8345: xen: qemu: net: eepro100:\n  infinite loop in processing command block list\n\n- bsc#956592 -  xen: virtual PMU is unsupported (XSA-163)\n\n- bsc#956408 -  CVE-2015-8339, CVE-2015-8340: xen:\n  XENMEM_exchange error handling issues (XSA-159)\n\n- bsc#956409 -  CVE-2015-8341: xen: libxl leak of pv kernel\n  and initrd on error (XSA-160)\n\n- bsc#956411 -  CVE-2015-7504: xen: heap buffer overflow\n  vulnerability in pcnet emulator (XSA-162)\n\n- bsc#947165 -  CVE-2015-7311: xen: libxl fails to honour\n  readonly flag on disks with qemu-xen (xsa-142)\n\n- bsc#954405 -  CVE-2015-8104: Xen: guest to host DoS by\n  triggering an infinite loop in microcode via #DB exception\n\n- bsc#954018 -  CVE-2015-5307: xen: x86: CPU lockup during\n  fault delivery (XSA-156)\n  CVE-2015-5307-xsa156.patch\n\n- bsc#950704 -  CVE-2015-7970: xen: x86: Long latency\n  populate-on-demand operation is not preemptible (XSA-150)\n  563212c9-x86-PoD-Eager-sweep-for-zeroed-pages.patch\n\n- bsc#951845 -  CVE-2015-7972: xen: x86: populate-on-demand\n  balloon size inaccuracy can crash guests (XSA-153)\n  xsa153-libxl.patch\n  xend-xsa153.patch\n- Drop 5604f239-x86-PV-properly-populate-descriptor-tables.patch\n\n- bsc#950703 -  CVE-2015-7969: xen: leak of main per-domain\n  vcpu pointer array (DoS) (XSA-149)\n- bsc#950705 -  CVE-2015-7969: xen: x86: leak of per-domain\n  profiling-related vcpu pointer array (DoS) (XSA-151)\n- bsc#950706 -  CVE-2015-7971: xen: x86: some pmu and\n  profiling hypercalls log without rate limiting (XSA-152)","status":"published","published":"2015-12-19T11:26:05Z","modified":"2026-02-04T03:51:29.495663Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"SUSE-SU-2015:2338-1","title":"Security update for xen","description":"\n      This update fixes the following security issues:\n\n- bsc#955399 -  Fix xm migrate --log_progress.\n  Due to logic error progress was not logged when requested.\n\n- bsc#956832 -  CVE-2015-8345: xen: qemu: net: eepro100:\n  infinite loop in processing command block list\n\n- bsc#956592 -  xen: virtual PMU is unsupported (XSA-163)\n\n- bsc#956408 -  CVE-2015-8339, CVE-2015-8340: xen:\n  XENMEM_exchange error handling issues (XSA-159)\n\n- bsc#956409 -  CVE-2015-8341: xen: libxl leak of pv kernel\n  and initrd on error (XSA-160)\n\n- bsc#956411 -  CVE-2015-7504: xen: heap buffer overflow\n  vulnerability in pcnet emulator (XSA-162)\n\n- bsc#947165 -  CVE-2015-7311: xen: libxl fails to honour\n  readonly flag on disks with qemu-xen (xsa-142)\n\n- bsc#955399 -  Fix xm migrate --live.  The options were not passed\n  due to a merge error. As a result the migration was not live,\n  instead the suspended guest was migrated.\n\n- bsc#954405 -  CVE-2015-8104: Xen: guest to host DoS by\n  triggering an infinite loop in microcode via #DB exception\n\n- bsc#954018 -  CVE-2015-5307: xen: x86: CPU lockup during\n  fault delivery (XSA-156)\n\n\n- bsc#950704 -  CVE-2015-7970: xen: x86: Long latency\n  populate-on-demand operation is not preemptible (XSA-150)\n\n- bsc#951845 -  CVE-2015-7972: xen: x86: populate-on-demand\n  balloon size inaccuracy can crash guests (XSA-153)\n\n- Drop 5604f239-x86-PV-properly-populate-descriptor-tables.patch\n\n- bsc#950703 -  CVE-2015-7969: xen: leak of main per-domain\n  vcpu pointer array (DoS) (XSA-149)\n\n- bsc#950705 -  CVE-2015-7969: xen: x86: leak of per-domain\n  profiling-related vcpu pointer array (DoS) (XSA-151)\n\n- bsc#950706 -  CVE-2015-7971: xen: x86: some pmu and\n  profiling hypercalls log without rate limiting (XSA-152)","status":"published","published":"2015-12-22T08:41:00Z","modified":"2026-02-04T02:16:43.367905Z","updated_at":"2026-11-02T15:53:43.030986Z"},{"id":"UBUNTU-CVE-2015-8341","description":"The libxl toolstack library in Xen 4.1.x through 4.6.x does not properly release mappings of files used as kernels and initial ramdisks when managing multiple domains in the same process, which allows attackers to cause a denial of service (memory and disk consumption) by starting domains.","status":"published","published":"2015-12-17T19:59:00Z","modified":"2026-04-22T10:20:52.642928Z","updated_at":"2026-11-02T15:54:10.737723Z"}]}}