Search

Find a vulnerability

Search criteria

    Related vulnerabilities

    CERTFR-2026-AVI-1136

    Vulnerability from certfr_avis - Published: 2026-09-09 - Updated: 2026-09-09

    De multiples vulnérabilités ont été découvertes dans Xen. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, un déni de service à distance et un contournement de la politique de sécurité.

    Solutions

    Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

    Impacted products
    Vendor Product Description
    XEN Xen Xen toutes versions sans le dernier correctif de sécurité
    References

    Show details on source website

    {
      "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
      "affected_systems": [
        {
          "description": "Xen toutes versions sans le dernier correctif de s\u00e9curit\u00e9",
          "product": {
            "name": "Xen",
            "vendor": {
              "name": "XEN",
              "scada": false
            }
          }
        }
      ],
      "affected_systems_content": "",
      "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
      "cves": [
        {
          "name": "CVE-2026-79603",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-79603"
        },
        {
          "name": "CVE-2026-62437",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-62437"
        },
        {
          "name": "CVE-2026-79604",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-79604"
        },
        {
          "name": "CVE-2026-79606",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-79606"
        },
        {
          "name": "CVE-2026-79605",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-79605"
        },
        {
          "name": "CVE-2026-79602",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-79602"
        }
      ],
      "initial_release_date": "2026-09-09T00:00:00",
      "last_revision_date": "2026-09-09T00:00:00",
      "links": [],
      "reference": "CERTFR-2026-AVI-1136",
      "revisions": [
        {
          "description": "Version initiale",
          "revision_date": "2026-09-09T00:00:00.000000"
        }
      ],
      "risks": [
        {
          "description": "D\u00e9ni de service \u00e0 distance"
        },
        {
          "description": "Ex\u00e9cution de code arbitraire"
        },
        {
          "description": "Contournement de la politique de s\u00e9curit\u00e9"
        }
      ],
      "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Xen. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire, un d\u00e9ni de service \u00e0 distance et un contournement de la politique de s\u00e9curit\u00e9.",
      "title": "Multiples vuln\u00e9rabilit\u00e9s dans Xen",
      "vendor_advisories": [
        {
          "published_at": "2026-09-08",
          "title": "Bulletin de s\u00e9curit\u00e9 Xen xsa/advisory-512",
          "url": "https://xenbits.xen.org/xsa/advisory-512.html"
        },
        {
          "published_at": "2026-09-08",
          "title": "Bulletin de s\u00e9curit\u00e9 Xen xsa/advisory-509",
          "url": "https://xenbits.xen.org/xsa/advisory-509.html"
        },
        {
          "published_at": "2026-09-08",
          "title": "Bulletin de s\u00e9curit\u00e9 Xen xsa/advisory-510",
          "url": "https://xenbits.xen.org/xsa/advisory-510.html"
        },
        {
          "published_at": "2026-09-08",
          "title": "Bulletin de s\u00e9curit\u00e9 Xen xsa/advisory-511",
          "url": "https://xenbits.xen.org/xsa/advisory-511.html"
        },
        {
          "published_at": "2026-09-08",
          "title": "Bulletin de s\u00e9curit\u00e9 Xen xsa/advisory-513",
          "url": "https://xenbits.xen.org/xsa/advisory-513.html"
        }
      ]
    }

    UBUNTU-CVE-2026-79604 (CVE-2026-79604)

    Vulnerability from osv_ubuntu – Published: 2026-09-08 12:00 – Updated: 2026-09-08 12:00 – Source website
    VLAI
    Details

    oxenstored: Unbounded accumulation of watches: Oxenstored maintains two datastructures about watches; one global trie, and one hashtable tracked per domain. When a xenbus reconnect is requested, watches are not cleared out of the global trie. A guest can cause unbounded memory usage in oxenstored. This can lead to a system-wide DoS. All version of Xen from 4.6 onwards are vulnerable. Only systems using the Ocaml Xenstored implementation are vulnerable. Systems using the C Xenstored implementation are not vulnerable.

    Severity
    N/A (UNKNOWN)

    {
      "affected": [
        {
          "ecosystem_specific": {
            "binaries": [
              {
                "binary_name": "libxen-4.6",
                "binary_version": "4.6.5-0ubuntu1.4"
              },
              {
                "binary_name": "libxenstore3.0",
                "binary_version": "4.6.5-0ubuntu1.4"
              },
              {
                "binary_name": "xen-hypervisor-4.4-amd64",
                "binary_version": "4.6.5-0ubuntu1.4"
              },
              {
                "binary_name": "xen-hypervisor-4.4-arm64",
                "binary_version": "4.6.5-0ubuntu1.4"
              },
              {
                "binary_name": "xen-hypervisor-4.4-armhf",
                "binary_version": "4.6.5-0ubuntu1.4"
              },
              {
                "binary_name": "xen-hypervisor-4.5-amd64",
                "binary_version": "4.6.5-0ubuntu1.4"
              },
              {
                "binary_name": "xen-hypervisor-4.5-arm64",
                "binary_version": "4.6.5-0ubuntu1.4"
              },
              {
                "binary_name": "xen-hypervisor-4.5-armhf",
                "binary_version": "4.6.5-0ubuntu1.4"
              },
              {
                "binary_name": "xen-hypervisor-4.6-amd64",
                "binary_version": "4.6.5-0ubuntu1.4"
              },
              {
                "binary_name": "xen-hypervisor-4.6-arm64",
                "binary_version": "4.6.5-0ubuntu1.4"
              },
              {
                "binary_name": "xen-hypervisor-4.6-armhf",
                "binary_version": "4.6.5-0ubuntu1.4"
              },
              {
                "binary_name": "xen-system-amd64",
                "binary_version": "4.6.5-0ubuntu1.4"
              },
              {
                "binary_name": "xen-system-arm64",
                "binary_version": "4.6.5-0ubuntu1.4"
              },
              {
                "binary_name": "xen-system-armhf",
                "binary_version": "4.6.5-0ubuntu1.4"
              },
              {
                "binary_name": "xen-utils-4.6",
                "binary_version": "4.6.5-0ubuntu1.4"
              },
              {
                "binary_name": "xen-utils-common",
                "binary_version": "4.6.5-0ubuntu1.4"
              },
              {
                "binary_name": "xenstore-utils",
                "binary_version": "4.6.5-0ubuntu1.4"
              }
            ]
          },
          "package": {
            "ecosystem": "Ubuntu:16.04:LTS",
            "name": "xen",
            "purl": "pkg:deb/ubuntu/xen@4.6.5-0ubuntu1.4?arch=source\u0026distro=xenial"
          },
          "ranges": [
            {
              "events": [
                {
                  "introduced": "0"
                }
              ],
              "type": "ECOSYSTEM"
            }
          ],
          "versions": [
            "4.5.1-0ubuntu1",
            "4.5.1-0ubuntu2",
            "4.6.0-1ubuntu1",
            "4.6.0-1ubuntu2",
            "4.6.0-1ubuntu4",
            "4.6.0-1ubuntu4.1",
            "4.6.0-1ubuntu4.2",
            "4.6.0-1ubuntu4.3",
            "4.6.5-0ubuntu1",
            "4.6.5-0ubuntu1.1",
            "4.6.5-0ubuntu1.2",
            "4.6.5-0ubuntu1.4"
          ]
        },
        {
          "ecosystem_specific": {
            "binaries": [
              {
                "binary_name": "libxen-4.9",
                "binary_version": "4.9.2-0ubuntu1"
              },
              {
                "binary_name": "libxenstore3.0",
                "binary_version": "4.9.2-0ubuntu1"
              },
              {
                "binary_name": "xen-hypervisor-4.6-amd64",
                "binary_version": "4.9.2-0ubuntu1"
              },
              {
                "binary_name": "xen-hypervisor-4.6-arm64",
                "binary_version": "4.9.2-0ubuntu1"
              },
              {
                "binary_name": "xen-hypervisor-4.6-armhf",
                "binary_version": "4.9.2-0ubuntu1"
              },
              {
                "binary_name": "xen-hypervisor-4.7-amd64",
                "binary_version": "4.9.2-0ubuntu1"
              },
              {
                "binary_name": "xen-hypervisor-4.7-arm64",
                "binary_version": "4.9.2-0ubuntu1"
              },
              {
                "binary_name": "xen-hypervisor-4.7-armhf",
                "binary_version": "4.9.2-0ubuntu1"
              },
              {
                "binary_name": "xen-hypervisor-4.8-amd64",
                "binary_version": "4.9.2-0ubuntu1"
              },
              {
                "binary_name": "xen-hypervisor-4.8-arm64",
                "binary_version": "4.9.2-0ubuntu1"
              },
              {
                "binary_name": "xen-hypervisor-4.8-armhf",
                "binary_version": "4.9.2-0ubuntu1"
              },
              {
                "binary_name": "xen-hypervisor-4.9-amd64",
                "binary_version": "4.9.2-0ubuntu1"
              },
              {
                "binary_name": "xen-hypervisor-4.9-arm64",
                "binary_version": "4.9.2-0ubuntu1"
              },
              {
                "binary_name": "xen-hypervisor-4.9-armhf",
                "binary_version": "4.9.2-0ubuntu1"
              },
              {
                "binary_name": "xen-system-amd64",
                "binary_version": "4.9.2-0ubuntu1"
              },
              {
                "binary_name": "xen-system-arm64",
                "binary_version": "4.9.2-0ubuntu1"
              },
              {
                "binary_name": "xen-system-armhf",
                "binary_version": "4.9.2-0ubuntu1"
              },
              {
                "binary_name": "xen-utils-4.9",
                "binary_version": "4.9.2-0ubuntu1"
              },
              {
                "binary_name": "xen-utils-common",
                "binary_version": "4.9.2-0ubuntu1"
              },
              {
                "binary_name": "xenstore-utils",
                "binary_version": "4.9.2-0ubuntu1"
              }
            ]
          },
          "package": {
            "ecosystem": "Ubuntu:18.04:LTS",
            "name": "xen",
            "purl": "pkg:deb/ubuntu/xen@4.9.2-0ubuntu1?arch=source\u0026distro=bionic"
          },
          "ranges": [
            {
              "events": [
                {
                  "introduced": "0"
                }
              ],
              "type": "ECOSYSTEM"
            }
          ],
          "versions": [
            "4.9.0-0ubuntu3",
            "4.9.0-0ubuntu4",
            "4.9.2-0ubuntu1"
          ]
        },
        {
          "ecosystem_specific": {
            "binaries": [
              {
                "binary_name": "libxencall1",
                "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3"
              },
              {
                "binary_name": "libxendevicemodel1",
                "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3"
              },
              {
                "binary_name": "libxenevtchn1",
                "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3"
              },
              {
                "binary_name": "libxenforeignmemory1",
                "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3"
              },
              {
                "binary_name": "libxengnttab1",
                "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3"
              },
              {
                "binary_name": "libxenmisc4.11",
                "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3"
              },
              {
                "binary_name": "libxenstore3.0",
                "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3"
              },
              {
                "binary_name": "libxentoolcore1",
                "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3"
              },
              {
                "binary_name": "libxentoollog1",
                "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3"
              },
              {
                "binary_name": "xen-hypervisor-4.11-amd64",
                "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3"
              },
              {
                "binary_name": "xen-hypervisor-4.11-arm64",
                "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3"
              },
              {
                "binary_name": "xen-hypervisor-4.11-armhf",
                "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3"
              },
              {
                "binary_name": "xen-hypervisor-4.9-amd64",
                "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3"
              },
              {
                "binary_name": "xen-hypervisor-4.9-arm64",
                "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3"
              },
              {
                "binary_name": "xen-hypervisor-4.9-armhf",
                "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3"
              },
              {
                "binary_name": "xen-hypervisor-common",
                "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3"
              },
              {
                "binary_name": "xen-system-amd64",
                "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3"
              },
              {
                "binary_name": "xen-system-arm64",
                "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3"
              },
              {
                "binary_name": "xen-system-armhf",
                "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3"
              },
              {
                "binary_name": "xen-utils-4.11",
                "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3"
              },
              {
                "binary_name": "xen-utils-common",
                "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3"
              },
              {
                "binary_name": "xenstore-utils",
                "binary_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3"
              }
            ]
          },
          "package": {
            "ecosystem": "Ubuntu:20.04:LTS",
            "name": "xen",
            "purl": "pkg:deb/ubuntu/xen@4.11.3+24-g14b62ab3e5-1ubuntu2.3?arch=source\u0026distro=focal"
          },
          "ranges": [
            {
              "events": [
                {
                  "introduced": "0"
                }
              ],
              "type": "ECOSYSTEM"
            }
          ],
          "versions": [
            "4.9.2-0ubuntu2",
            "4.9.2-0ubuntu6",
            "4.9.2-0ubuntu7",
            "4.11.3+24-g14b62ab3e5-1ubuntu1",
            "4.11.3+24-g14b62ab3e5-1ubuntu2",
            "4.11.3+24-g14b62ab3e5-1ubuntu2.2",
            "4.11.3+24-g14b62ab3e5-1ubuntu2.3"
          ]
        },
        {
          "ecosystem_specific": {
            "binaries": [
              {
                "binary_name": "libxencall1",
                "binary_version": "4.16.0-1~ubuntu2.1"
              },
              {
                "binary_name": "libxendevicemodel1",
                "binary_version": "4.16.0-1~ubuntu2.1"
              },
              {
                "binary_name": "libxenevtchn1",
                "binary_version": "4.16.0-1~ubuntu2.1"
              },
              {
                "binary_name": "libxenforeignmemory1",
                "binary_version": "4.16.0-1~ubuntu2.1"
              },
              {
                "binary_name": "libxengnttab1",
                "binary_version": "4.16.0-1~ubuntu2.1"
              },
              {
                "binary_name": "libxenhypfs1",
                "binary_version": "4.16.0-1~ubuntu2.1"
              },
              {
                "binary_name": "libxenmisc4.16",
                "binary_version": "4.16.0-1~ubuntu2.1"
              },
              {
                "binary_name": "libxenstore4",
                "binary_version": "4.16.0-1~ubuntu2.1"
              },
              {
                "binary_name": "libxentoolcore1",
                "binary_version": "4.16.0-1~ubuntu2.1"
              },
              {
                "binary_name": "libxentoollog1",
                "binary_version": "4.16.0-1~ubuntu2.1"
              },
              {
                "binary_name": "xen-hypervisor-4.16-amd64",
                "binary_version": "4.16.0-1~ubuntu2.1"
              },
              {
                "binary_name": "xen-hypervisor-4.16-arm64",
                "binary_version": "4.16.0-1~ubuntu2.1"
              },
              {
                "binary_name": "xen-hypervisor-4.16-armhf",
                "binary_version": "4.16.0-1~ubuntu2.1"
              },
              {
                "binary_name": "xen-hypervisor-common",
                "binary_version": "4.16.0-1~ubuntu2.1"
              },
              {
                "binary_name": "xen-system-amd64",
                "binary_version": "4.16.0-1~ubuntu2.1"
              },
              {
                "binary_name": "xen-system-arm64",
                "binary_version": "4.16.0-1~ubuntu2.1"
              },
              {
                "binary_name": "xen-system-armhf",
                "binary_version": "4.16.0-1~ubuntu2.1"
              },
              {
                "binary_name": "xen-utils-4.16",
                "binary_version": "4.16.0-1~ubuntu2.1"
              },
              {
                "binary_name": "xen-utils-common",
                "binary_version": "4.16.0-1~ubuntu2.1"
              },
              {
                "binary_name": "xenstore-utils",
                "binary_version": "4.16.0-1~ubuntu2.1"
              }
            ]
          },
          "package": {
            "ecosystem": "Ubuntu:22.04:LTS",
            "name": "xen",
            "purl": "pkg:deb/ubuntu/xen@4.16.0-1~ubuntu2.1?arch=source\u0026distro=jammy"
          },
          "ranges": [
            {
              "events": [
                {
                  "introduced": "0"
                }
              ],
              "type": "ECOSYSTEM"
            }
          ],
          "versions": [
            "4.11.4+24-gddaaccbbab-1ubuntu2",
            "4.16.0-1~ubuntu2",
            "4.16.0-1~ubuntu2.1"
          ]
        },
        {
          "ecosystem_specific": {
            "binaries": [
              {
                "binary_name": "libxencall1t64",
                "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3"
              },
              {
                "binary_name": "libxendevicemodel1t64",
                "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3"
              },
              {
                "binary_name": "libxenevtchn1t64",
                "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3"
              },
              {
                "binary_name": "libxenforeignmemory1t64",
                "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3"
              },
              {
                "binary_name": "libxengnttab1t64",
                "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3"
              },
              {
                "binary_name": "libxenhypfs1t64",
                "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3"
              },
              {
                "binary_name": "libxenmisc4.17t64",
                "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3"
              },
              {
                "binary_name": "libxenstore4t64",
                "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3"
              },
              {
                "binary_name": "libxentoolcore1t64",
                "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3"
              },
              {
                "binary_name": "libxentoollog1t64",
                "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3"
              },
              {
                "binary_name": "xen-hypervisor-4.17-amd64",
                "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3"
              },
              {
                "binary_name": "xen-hypervisor-4.17-arm64",
                "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3"
              },
              {
                "binary_name": "xen-hypervisor-4.17-armhf",
                "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3"
              },
              {
                "binary_name": "xen-hypervisor-common",
                "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3"
              },
              {
                "binary_name": "xen-system-amd64",
                "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3"
              },
              {
                "binary_name": "xen-system-arm64",
                "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3"
              },
              {
                "binary_name": "xen-system-armhf",
                "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3"
              },
              {
                "binary_name": "xen-utils-4.17",
                "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3"
              },
              {
                "binary_name": "xen-utils-common",
                "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3"
              },
              {
                "binary_name": "xenstore-utils",
                "binary_version": "4.17.3+10-g091466ba55-1.1ubuntu3"
              }
            ]
          },
          "package": {
            "ecosystem": "Ubuntu:24.04:LTS",
            "name": "xen",
            "purl": "pkg:deb/ubuntu/xen@4.17.3+10-g091466ba55-1.1ubuntu3?arch=source\u0026distro=noble"
          },
          "ranges": [
            {
              "events": [
                {
                  "introduced": "0"
                }
              ],
              "type": "ECOSYSTEM"
            }
          ],
          "versions": [
            "4.17.2-1",
            "4.17.2+55-g0b56bed864-1",
            "4.17.2+76-ge1f9cb16e2-1",
            "4.17.2+76-ge1f9cb16e2-1ubuntu1",
            "4.17.3+10-g091466ba55-1",
            "4.17.3+10-g091466ba55-1.1ubuntu2",
            "4.17.3+10-g091466ba55-1.1ubuntu3"
          ]
        },
        {
          "ecosystem_specific": {
            "binaries": [
              {
                "binary_name": "libxencall1",
                "binary_version": "4.20.2+7-g1badcf5035-2build2"
              },
              {
                "binary_name": "libxendevicemodel1",
                "binary_version": "4.20.2+7-g1badcf5035-2build2"
              },
              {
                "binary_name": "libxenevtchn1",
                "binary_version": "4.20.2+7-g1badcf5035-2build2"
              },
              {
                "binary_name": "libxenforeignmemory1",
                "binary_version": "4.20.2+7-g1badcf5035-2build2"
              },
              {
                "binary_name": "libxengnttab1",
                "binary_version": "4.20.2+7-g1badcf5035-2build2"
              },
              {
                "binary_name": "libxenhypfs1",
                "binary_version": "4.20.2+7-g1badcf5035-2build2"
              },
              {
                "binary_name": "libxenmisc4.20",
                "binary_version": "4.20.2+7-g1badcf5035-2build2"
              },
              {
                "binary_name": "libxenstore4",
                "binary_version": "4.20.2+7-g1badcf5035-2build2"
              },
              {
                "binary_name": "libxentoolcore1",
                "binary_version": "4.20.2+7-g1badcf5035-2build2"
              },
              {
                "binary_name": "libxentoollog1",
                "binary_version": "4.20.2+7-g1badcf5035-2build2"
              },
              {
                "binary_name": "xen-hypervisor-4.20-amd64",
                "binary_version": "4.20.2+7-g1badcf5035-2build2"
              },
              {
                "binary_name": "xen-hypervisor-4.20-arm64",
                "binary_version": "4.20.2+7-g1badcf5035-2build2"
              },
              {
                "binary_name": "xen-hypervisor-common",
                "binary_version": "4.20.2+7-g1badcf5035-2build2"
              },
              {
                "binary_name": "xen-system-amd64",
                "binary_version": "4.20.2+7-g1badcf5035-2build2"
              },
              {
                "binary_name": "xen-system-arm64",
                "binary_version": "4.20.2+7-g1badcf5035-2build2"
              },
              {
                "binary_name": "xen-utils-4.20",
                "binary_version": "4.20.2+7-g1badcf5035-2build2"
              },
              {
                "binary_name": "xen-utils-common",
                "binary_version": "4.20.2+7-g1badcf5035-2build2"
              },
              {
                "binary_name": "xenstore-utils",
                "binary_version": "4.20.2+7-g1badcf5035-2build2"
              }
            ]
          },
          "package": {
            "ecosystem": "Ubuntu:26.04:LTS",
            "name": "xen",
            "purl": "pkg:deb/ubuntu/xen@4.20.2+7-g1badcf5035-2build2?arch=source\u0026distro=resolute"
          },
          "ranges": [
            {
              "events": [
                {
                  "introduced": "0"
                }
              ],
              "type": "ECOSYSTEM"
            }
          ],
          "versions": [
            "4.20.0+68-g35cb38b222-1",
            "4.20.2+7-g1badcf5035-2",
            "4.20.2+7-g1badcf5035-2build2"
          ]
        }
      ],
      "aliases": [],
      "details": "oxenstored: Unbounded accumulation of watches: Oxenstored maintains two datastructures about watches; one global trie, and one hashtable tracked per domain.  When a xenbus reconnect is requested, watches are not cleared out of the global trie. A guest can cause unbounded memory usage in oxenstored.  This can lead to a system-wide DoS. All version of Xen from 4.6 onwards are vulnerable. Only systems using the Ocaml Xenstored implementation are vulnerable. Systems using the C Xenstored implementation are not vulnerable.",
      "id": "UBUNTU-CVE-2026-79604",
      "modified": "2026-09-08T12:00:00Z",
      "published": "2026-09-08T12:00:00Z",
      "references": [
        {
          "type": "REPORT",
          "url": "https://ubuntu.com/security/CVE-2026-79604"
        },
        {
          "type": "REPORT",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-79604"
        }
      ],
      "related": [],
      "schema_version": "1.7.0",
      "severity": [
        {
          "score": "medium",
          "type": "Ubuntu"
        }
      ],
      "upstream": [
        "CVE-2026-79604"
      ]
    }

    WID-SEC-W-2026-3248

    Vulnerability from csaf_certbund - Published: 2026-09-08 22:00 - Updated: 2026-09-16 22:00
    Summary
    Xen: Mehrere Schwachstellen
    Severity
    Hoch
    Scope
    6 vulnerabilities in this advisory, including CVE-2026-79604.
    CVE-2026-79604
    Known affected: 4 products
    Open the full advisory