https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T19:39:58.665357+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2023-avi-0834 certfr-2023-avi-0834 — De multiples vulnérabilités ont été découvertes dans<span class="textit"> Xen</span>. Elles permettent à un attaquant d… 2026-10-04T19:39:58.687804+00:00 certfr-2023-avi-0834 https://cve.radiocsirt.org/vuln/euvd-2026-259673 EUVD-2026-259673 2026-10-04T19:39:58.687979+00:00 EUVD-2026-259673 https://cve.radiocsirt.org/vuln/fkie_cve-2023-34328 fkie_cve-2023-34328 2026-10-04T19:39:58.688003+00:00

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.]

AMD CPUs since ~2014 have extensions to normal x86 debugging functionality. Xen supports guests using these extensions.

Unfortunately there are errors in Xen's handling of the guest state, leading to denials of service.

1) CVE-2023-34327 - An HVM vCPU can end up operating in the context of a previous vCPUs debug mask state.

2) CVE-2023-34328 - A PV vCPU can place a breakpoint over the live GDT. This allows the PV vCPU to exploit XSA-156 / CVE-2015-8104 and lock up the CPU entirely.

 https://cve.radiocsirt.org/vuln/ghsa-fm4g-p248-j5wj GHSA-fm4g-p248-j5wj 2026-10-04T19:39:58.688129+00:00

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.]

AMD CPUs since ~2014 have extensions to normal x86 debugging functionality. Xen supports guests using these extensions.

Unfortunately there are errors in Xen's handling of the guest state, leading to denials of service.

1) CVE-2023-34327 - An HVM vCPU can end up operating in the context of a previous vCPUs debug mask state.

2) CVE-2023-34328 - A PV vCPU can place a breakpoint over the live GDT. This allows the PV vCPU to exploit XSA-156 / CVE-2015-8104 and lock up the CPU entirely.

 https://cve.radiocsirt.org/vuln/gsd-2023-34328 gsd-2023-34328 2026-10-04T19:39:58.688177+00:00 gsd-2023-34328 https://cve.radiocsirt.org/vuln/suse-su-2023:4054-1 SUSE-SU-2023:4054-1 — Security update for xen 2026-10-04T19:39:58.688197+00:00

Security update for xen

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-34328 UBUNTU-CVE-2023-34328 2026-10-04T19:39:58.688232+00:00

Affected: Ubuntu:16.04:LTS: xen, Ubuntu:18.04:LTS: xen, Ubuntu:20.04:LTS: xen, Ubuntu:22.04:LTS: xen, Ubuntu:24.04:LTS: xen, Ubuntu:25.10: xen, Ubuntu:26.04:LTS: xen

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] AMD CPUs since ~2014 have extensions to normal x86 debugging functionality. Xen supports guests using these extensions. Unfortunately there are errors in Xen's handling of the guest state, leading to denials of service. 1) CVE-2023-34327 - An HVM vCPU can end up operating in the context of a previous vCPUs debug mask state. 2) CVE-2023-34328 - A PV vCPU can place a breakpoint over the live GDT. This allows the PV vCPU to exploit XSA-156 / CVE-2015-8104 and lock up the CPU entirely.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2617 WID-SEC-W-2023-2617 — Xen: Mehrere Schwachstellen 2026-10-04T19:39:58.688332+00:00

Ein Angreifer kann mehrere Schwachstellen in Xen ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen, beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder seine Privilegien zu erweitern.