
CVE catalog
CVE-2020-15563
xen affected and fixed versions
An issue was discovered in Xen through 4.13.x, allowing x86 HVM guest OS users to cause a hypervisor crash. An inverted conditional in x86 HVM guests' dirty video RAM tracking code allows such guests to make Xen de-reference a pointer guaranteed to point at unmapped space. A malicious or buggy HVM guest may cause the hypervisor to crash, resulting in Denial of Service (DoS) affecting the entire host. Xen versions from 4.8 onwards are affected. Xen versions 4.7 and earlier are not affected. Only x86 systems are affected. Arm systems are not affected. Only x86 HVM guests using shadow paging can leverage the vulnerability. In addition, there needs to be an entity actively monitoring a guest's video frame buffer (typically for display purposes) in order for such a guest to be able to leverage the vulnerability. x86 PV guests, as well as x86 HVM guests using hardware assisted paging (HAP), cannot leverage the vulnerability.
- Severity
- Medium · CVSS 6.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.41% · Oct 27, 2026
Projects and upstream resources
Reported versions and fixes
Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.
| Distribution / release | Package | Version | Status | Source |
|---|---|---|---|---|
| Debiantrixie-security | xen | 4.20.4+39-gf1e1321c87-0+deb13u1 | Fixed | [CVE-2020-15563] |
| Debiantrixie | xen | 4.11.4+24-gddaaccbbab-1 | FixedDistribution-reported fixed boundary | [CVE-2020-15563] |
| Debiantrixie | xen | 4.20.3+127-gc42374a105-0+deb13u1 | Fixed | [CVE-2020-15563] |
| Debiansid | xen | 4.11.4+24-gddaaccbbab-1 | FixedDistribution-reported fixed boundary | [CVE-2020-15563] |
| Debiansid | xen | 4.20.4+39-gf1e1321c87-1 | Fixed | [CVE-2020-15563] |
| Debianforky | xen | 4.11.4+24-gddaaccbbab-1 | FixedDistribution-reported fixed boundary | [CVE-2020-15563] |
| Debianforky | xen | 4.20.4+39-gf1e1321c87-1 | Fixed | [CVE-2020-15563] |
| Debianbookworm-security | xen | 4.17.7-0+deb12u1 | Fixed | [CVE-2020-15563] |
| Debianbookworm | xen | 4.11.4+24-gddaaccbbab-1 | FixedDistribution-reported fixed boundary | [CVE-2020-15563] |
| Debianbookworm | xen | 4.17.5+72-g01140da4e8-1 | Fixed | [CVE-2020-15563] |
Showing 10 fix observations. All 47 observations, including unknown and conflicting reports, are available below.
Provider details and historical evidence
| Distribution / release | Package | Version | Status | Source |
|---|---|---|---|---|
| Alpine3.10 | xen | 4.12.3-r2 | UnknownSource applicability is not established | [ALPINE-CVE-2020-15563] |
| Alpine3.11 | xen | 4.13.1-r2 | UnknownSource applicability is not established | [ALPINE-CVE-2020-15563] |
| Alpine3.12 | xen | 4.13.1-r2 | UnknownSource applicability is not established | [ALPINE-CVE-2020-15563] |
| Alpine3.13 | xen | 4.13.1-r4 | UnknownSource applicability is not established | [ALPINE-CVE-2020-15563] |
| Alpine3.14 | xen | 4.13.1-r4 | UnknownSource applicability is not established | [ALPINE-CVE-2020-15563] |
| Alpine3.15 | xen | 4.13.1-r4 | UnknownSource applicability is not established | [ALPINE-CVE-2020-15563] |
| Alpine3.16 | xen | 4.13.1-r4 | UnknownSource applicability is not established | [ALPINE-CVE-2020-15563] |
| Alpine3.17 | xen | 4.13.1-r4 | UnknownSource applicability is not established | [ALPINE-CVE-2020-15563] |
| Alpine3.18 | xen | 4.13.1-r4 | UnknownSource applicability is not established | [ALPINE-CVE-2020-15563] |
| Alpine3.19 | xen | 4.13.1-r4 | UnknownSource applicability is not established | [ALPINE-CVE-2020-15563] |
| Alpine3.20 | xen | 4.13.1-r4 | UnknownSource applicability is not established | [ALPINE-CVE-2020-15563] |
| Alpine3.21 | xen | 4.13.1-r4 | UnknownSource applicability is not established | [ALPINE-CVE-2020-15563] |
| Alpine3.22 | xen | 4.13.1-r4 | UnknownSource applicability is not established | [ALPINE-CVE-2020-15563] |
| Alpine3.23 | xen | 4.13.1-r4 | UnknownSource applicability is not established | [ALPINE-CVE-2020-15563] |
| Alpine3.24 | xen | 4.13.1-r4 | UnknownSource applicability is not established | [ALPINE-CVE-2020-15563] |
| Alpine3.9 | xen | 4.11.4-r0 | UnknownSource applicability is not established | [ALPINE-CVE-2020-15563] |
| Debianbookworm | xen | 4.11.4+24-gddaaccbbab-1 | FixedDistribution-reported fixed boundary | [CVE-2020-15563] |
| Debianbookworm | xen | 4.17.5+72-g01140da4e8-1 | Fixed | [CVE-2020-15563] |
| Debianbookworm-security | xen | 4.17.7-0+deb12u1 | Fixed | [CVE-2020-15563] |
| Debianforky | xen | 4.11.4+24-gddaaccbbab-1 | FixedDistribution-reported fixed boundary | [CVE-2020-15563] |
| Debianforky | xen | 4.20.4+39-gf1e1321c87-1 | Fixed | [CVE-2020-15563] |
| Debiansid | xen | 4.11.4+24-gddaaccbbab-1 | FixedDistribution-reported fixed boundary | [CVE-2020-15563] |
| Debiansid | xen | 4.20.4+39-gf1e1321c87-1 | Fixed | [CVE-2020-15563] |
| Debiantrixie | xen | 4.11.4+24-gddaaccbbab-1 | FixedDistribution-reported fixed boundary | [CVE-2020-15563] |
| Debiantrixie | xen | 4.20.3+127-gc42374a105-0+deb13u1 | Fixed | [CVE-2020-15563] |
| Debiantrixie-security | xen | 4.20.4+39-gf1e1321c87-0+deb13u1 | Fixed | [CVE-2020-15563] |
| Suseenterprise storage 5 | xen | 4.9.4_08-3.66.1 | UnknownSource applicability is not established | [SUSE-SU-2020:1886-1] |
| Susehpe helion openstack 8 | xen | 4.9.4_08-3.66.1 | UnknownSource applicability is not established | [SUSE-SU-2020:1886-1] |
| Suselinux enterprise high performance computing 15-espos | xen | 4.10.4_12-3.35.1 | UnknownSource applicability is not established | [SUSE-SU-2020:1888-1] |
| Suselinux enterprise high performance computing 15-ltss | xen | 4.10.4_12-3.35.1 | UnknownSource applicability is not established | [SUSE-SU-2020:1888-1] |
| Suselinux enterprise server 12 sp3-bcl | xen | 4.9.4_08-3.66.1 | UnknownSource applicability is not established | [SUSE-SU-2020:1886-1] |
| Suselinux enterprise server 12 sp3-ltss | xen | 4.9.4_08-3.66.1 | UnknownSource applicability is not established | [SUSE-SU-2020:1886-1] |
| Suselinux enterprise server 12 sp4-ltss | xen | 4.11.4_04-2.30.1 | UnknownSource applicability is not established | [SUSE-SU-2020:1891-1] |
| Suselinux enterprise server for sap applications 12 sp3 | xen | 4.9.4_08-3.66.1 | UnknownSource applicability is not established | [SUSE-SU-2020:1886-1] |
| Suselinux enterprise server for sap applications 12 sp4 | xen | 4.11.4_04-2.30.1 | UnknownSource applicability is not established | [SUSE-SU-2020:1891-1] |
| Suselinux enterprise server for sap applications 15 | xen | 4.10.4_12-3.35.1 | UnknownSource applicability is not established | [SUSE-SU-2020:1888-1] |
| Suseopenstack cloud 8 | xen | 4.9.4_08-3.66.1 | UnknownSource applicability is not established | [SUSE-SU-2020:1886-1] |
| Suseopenstack cloud 9 | xen | 4.11.4_04-2.30.1 | UnknownSource applicability is not established | [SUSE-SU-2020:1891-1] |
| Suseopenstack cloud crowbar 8 | xen | 4.9.4_08-3.66.1 | UnknownSource applicability is not established | [SUSE-SU-2020:1886-1] |
| Suseopenstack cloud crowbar 9 | xen | 4.11.4_04-2.30.1 | UnknownSource applicability is not established | [SUSE-SU-2020:1891-1] |
| Ubuntu20.04 | xen | 4.11.3+24-g14b62ab3e5-1ubuntu1 | UnknownSource applicability is not established | [UBUNTU-CVE-2020-15563] |
| Ubuntu20.04 | xen | 4.11.3+24-g14b62ab3e5-1ubuntu2 | UnknownSource applicability is not established | [UBUNTU-CVE-2020-15563] |
| Ubuntu20.04 | xen | 4.11.3+24-g14b62ab3e5-1ubuntu2.2 | UnknownSource applicability is not established | [UBUNTU-CVE-2020-15563] |
| Ubuntu20.04 | xen | 4.11.3+24-g14b62ab3e5-1ubuntu2.3 | UnknownSource applicability is not established | [UBUNTU-CVE-2020-15563] |
| Ubuntu20.04 | xen | 4.9.2-0ubuntu2 | UnknownSource applicability is not established | [UBUNTU-CVE-2020-15563] |
| Ubuntu20.04 | xen | 4.9.2-0ubuntu6 | UnknownSource applicability is not established | [UBUNTU-CVE-2020-15563] |
| Ubuntu20.04 | xen | 4.9.2-0ubuntu7 | UnknownSource applicability is not established | [UBUNTU-CVE-2020-15563] |
Original provider fields
{
"package_releases": [
{
"name": "xen",
"status": "fixed",
"release": "sid",
"version": "4.20.4+39-gf1e1321c87-1"
},
{
"name": "xen",
"status": "fixed",
"release": "forky",
"version": "4.20.4+39-gf1e1321c87-1"
},
{
"name": "xen",
"status": "fixed",
"release": "trixie",
"version": "4.20.3+127-gc42374a105-0+deb13u1"
},
{
"name": "xen",
"status": "fixed",
"release": "trixie-security",
"version": "4.20.4+39-gf1e1321c87-0+deb13u1"
},
{
"name": "xen",
"status": "fixed",
"release": "bookworm",
"version": "4.17.5+72-g01140da4e8-1"
},
{
"name": "xen",
"status": "fixed",
"release": "bookworm-security",
"version": "4.17.7-0+deb12u1"
}
],
"fixed_versions": [
{
"bug": null,
"name": "xen",
"type": "source",
"origin": null,
"release": "sid",
"urgency": "not yet assigned",
"fixed_version": "4.11.4+24-gddaaccbbab-1"
},
{
"bug": null,
"name": "xen",
"type": "source",
"origin": null,
"release": "forky",
"urgency": "not yet assigned",
"fixed_version": "4.11.4+24-gddaaccbbab-1"
},
{
"bug": null,
"name": "xen",
"type": "source",
"origin": null,
"release": "trixie",
"urgency": "not yet assigned",
"fixed_version": "4.11.4+24-gddaaccbbab-1"
},
{
"bug": null,
"name": "xen",
"type": "source",
"origin": null,
"release": "bookworm",
"urgency": "not yet assigned",
"fixed_version": "4.11.4+24-gddaaccbbab-1"
}
],
"distribution_packages": [
{
"name": "xen",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.8.0"
},
{
"fixed": "4.12.3-r2"
}
]
}
],
"release": "3.10",
"versions": [],
"ecosystem": "apk",
"provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-15563",
"fixed_version": "4.12.3-r2",
"provider_source": "pypi",
"provider_record_id": "ALPINE-CVE-2020-15563",
"provider_updated_at": "2026-10-26T11:17:55.132288383Z",
"applicability_unknown": true
},
{
"name": "xen",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.8.0"
},
{
"fixed": "4.13.1-r2"
}
]
}
],
"release": "3.11",
"versions": [],
"ecosystem": "apk",
"provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-15563",
"fixed_version": "4.13.1-r2",
"provider_source": "pypi",
"provider_record_id": "ALPINE-CVE-2020-15563",
"provider_updated_at": "2026-10-26T11:17:55.132288383Z",
"applicability_unknown": true
},
{
"name": "xen",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.8.0"
},
{
"fixed": "4.13.1-r2"
}
]
}
],
"release": "3.12",
"versions": [],
"ecosystem": "apk",
"provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-15563",
"fixed_version": "4.13.1-r2",
"provider_source": "pypi",
"provider_record_id": "ALPINE-CVE-2020-15563",
"provider_updated_at": "2026-10-26T11:17:55.132288383Z",
"applicability_unknown": true
},
{
"name": "xen",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.8.0"
},
{
"fixed": "4.13.1-r4"
}
]
}
],
"release": "3.13",
"versions": [],
"ecosystem": "apk",
"provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-15563",
"fixed_version": "4.13.1-r4",
"provider_source": "pypi",
"provider_record_id": "ALPINE-CVE-2020-15563",
"provider_updated_at": "2026-10-26T11:17:55.132288383Z",
"applicability_unknown": true
},
{
"name": "xen",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.8.0"
},
{
"fixed": "4.13.1-r4"
}
]
}
],
"release": "3.14",
"versions": [],
"ecosystem": "apk",
"provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-15563",
"fixed_version": "4.13.1-r4",
"provider_source": "pypi",
"provider_record_id": "ALPINE-CVE-2020-15563",
"provider_updated_at": "2026-10-26T11:17:55.132288383Z",
"applicability_unknown": true
},
{
"name": "xen",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.8.0"
},
{
"fixed": "4.13.1-r4"
}
]
}
],
"release": "3.15",
"versions": [],
"ecosystem": "apk",
"provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-15563",
"fixed_version": "4.13.1-r4",
"provider_source": "pypi",
"provider_record_id": "ALPINE-CVE-2020-15563",
"provider_updated_at": "2026-10-26T11:17:55.132288383Z",
"applicability_unknown": true
},
{
"name": "xen",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.8.0"
},
{
"fixed": "4.13.1-r4"
}
]
}
],
"release": "3.16",
"versions": [],
"ecosystem": "apk",
"provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-15563",
"fixed_version": "4.13.1-r4",
"provider_source": "pypi",
"provider_record_id": "ALPINE-CVE-2020-15563",
"provider_updated_at": "2026-10-26T11:17:55.132288383Z",
"applicability_unknown": true
},
{
"name": "xen",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.8.0"
},
{
"fixed": "4.13.1-r4"
}
]
}
],
"release": "3.17",
"versions": [],
"ecosystem": "apk",
"provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-15563",
"fixed_version": "4.13.1-r4",
"provider_source": "pypi",
"provider_record_id": "ALPINE-CVE-2020-15563",
"provider_updated_at": "2026-10-26T11:17:55.132288383Z",
"applicability_unknown": true
},
{
"name": "xen",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.8.0"
},
{
"fixed": "4.13.1-r4"
}
]
}
],
"release": "3.18",
"versions": [],
"ecosystem": "apk",
"provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-15563",
"fixed_version": "4.13.1-r4",
"provider_source": "pypi",
"provider_record_id": "ALPINE-CVE-2020-15563",
"provider_updated_at": "2026-10-26T11:17:55.132288383Z",
"applicability_unknown": true
},
{
"name": "xen",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.8.0"
},
{
"fixed": "4.13.1-r4"
}
]
}
],
"release": "3.19",
"versions": [],
"ecosystem": "apk",
"provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-15563",
"fixed_version": "4.13.1-r4",
"provider_source": "pypi",
"provider_record_id": "ALPINE-CVE-2020-15563",
"provider_updated_at": "2026-10-26T11:17:55.132288383Z",
"applicability_unknown": true
},
{
"name": "xen",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.8.0"
},
{
"fixed": "4.13.1-r4"
}
]
}
],
"release": "3.20",
"versions": [],
"ecosystem": "apk",
"provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-15563",
"fixed_version": "4.13.1-r4",
"provider_source": "pypi",
"provider_record_id": "ALPINE-CVE-2020-15563",
"provider_updated_at": "2026-10-26T11:17:55.132288383Z",
"applicability_unknown": true
},
{
"name": "xen",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.8.0"
},
{
"fixed": "4.13.1-r4"
}
]
}
],
"release": "3.21",
"versions": [],
"ecosystem": "apk",
"provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-15563",
"fixed_version": "4.13.1-r4",
"provider_source": "pypi",
"provider_record_id": "ALPINE-CVE-2020-15563",
"provider_updated_at": "2026-10-26T11:17:55.132288383Z",
"applicability_unknown": true
},
{
"name": "xen",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.8.0"
},
{
"fixed": "4.13.1-r4"
}
]
}
],
"release": "3.22",
"versions": [],
"ecosystem": "apk",
"provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-15563",
"fixed_version": "4.13.1-r4",
"provider_source": "pypi",
"provider_record_id": "ALPINE-CVE-2020-15563",
"provider_updated_at": "2026-10-26T11:17:55.132288383Z",
"applicability_unknown": true
},
{
"name": "xen",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.8.0"
},
{
"fixed": "4.13.1-r4"
}
]
}
],
"release": "3.23",
"versions": [],
"ecosystem": "apk",
"provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-15563",
"fixed_version": "4.13.1-r4",
"provider_source": "pypi",
"provider_record_id": "ALPINE-CVE-2020-15563",
"provider_updated_at": "2026-10-26T11:17:55.132288383Z",
"applicability_unknown": true
},
{
"name": "xen",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.8.0"
},
{
"fixed": "4.13.1-r4"
}
]
}
],
"release": "3.24",
"versions": [],
"ecosystem": "apk",
"provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-15563",
"fixed_version": "4.13.1-r4",
"provider_source": "pypi",
"provider_record_id": "ALPINE-CVE-2020-15563",
"provider_updated_at": "2026-10-26T11:17:55.132288383Z",
"applicability_unknown": true
},
{
"name": "xen",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.8.0"
},
{
"fixed": "4.11.4-r0"
}
]
}
],
"release": "3.9",
"versions": [],
"ecosystem": "apk",
"provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-15563",
"fixed_version": "4.11.4-r0",
"provider_source": "pypi",
"provider_record_id": "ALPINE-CVE-2020-15563",
"provider_updated_at": "2026-10-26T11:17:55.132288383Z",
"applicability_unknown": true
},
{
"name": "xen",
"distro": "ubuntu",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.11.3+24-g14b62ab3e5-1ubuntu2.3"
}
]
}
],
"release": "20.04",
"versions": [
"4.9.2-0ubuntu2",
"4.9.2-0ubuntu6",
"4.9.2-0ubuntu7",
"4.11.3+24-g14b62ab3e5-1ubuntu1",
"4.11.3+24-g14b62ab3e5-1ubuntu2",
"4.11.3+24-g14b62ab3e5-1ubuntu2.2"
],
"ecosystem": "deb",
"provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2020-15563",
"fixed_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3",
"provider_source": "pypi",
"provider_record_id": "UBUNTU-CVE-2020-15563",
"provider_updated_at": "2026-04-22T12:19:22.121919Z",
"applicability_unknown": true
},
{
"name": "xen",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.10.4_12-3.35.1"
}
]
}
],
"release": "linux enterprise high performance computing 15-espos",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2020:1888-1",
"fixed_version": "4.10.4_12-3.35.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2020:1888-1",
"provider_updated_at": "2026-02-04T04:40:34.474481Z",
"applicability_unknown": true
},
{
"name": "xen",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.10.4_12-3.35.1"
}
]
}
],
"release": "linux enterprise high performance computing 15-ltss",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2020:1888-1",
"fixed_version": "4.10.4_12-3.35.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2020:1888-1",
"provider_updated_at": "2026-02-04T04:40:34.474481Z",
"applicability_unknown": true
},
{
"name": "xen",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.10.4_12-3.35.1"
}
]
}
],
"release": "linux enterprise server for sap applications 15",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2020:1888-1",
"fixed_version": "4.10.4_12-3.35.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2020:1888-1",
"provider_updated_at": "2026-02-04T04:40:34.474481Z",
"applicability_unknown": true
},
{
"name": "xen",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.11.4_04-2.30.1"
}
]
}
],
"release": "openstack cloud 9",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2020:1891-1",
"fixed_version": "4.11.4_04-2.30.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2020:1891-1",
"provider_updated_at": "2026-02-04T04:25:59.237013Z",
"applicability_unknown": true
},
{
"name": "xen",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.11.4_04-2.30.1"
}
]
}
],
"release": "openstack cloud crowbar 9",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2020:1891-1",
"fixed_version": "4.11.4_04-2.30.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2020:1891-1",
"provider_updated_at": "2026-02-04T04:25:59.237013Z",
"applicability_unknown": true
},
{
"name": "xen",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.11.4_04-2.30.1"
}
]
}
],
"release": "linux enterprise server for sap applications 12 sp4",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2020:1891-1",
"fixed_version": "4.11.4_04-2.30.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2020:1891-1",
"provider_updated_at": "2026-02-04T04:25:59.237013Z",
"applicability_unknown": true
},
{
"name": "xen",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.11.4_04-2.30.1"
}
]
}
],
"release": "linux enterprise server 12 sp4-ltss",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2020:1891-1",
"fixed_version": "4.11.4_04-2.30.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2020:1891-1",
"provider_updated_at": "2026-02-04T04:25:59.237013Z",
"applicability_unknown": true
},
{
"name": "xen",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.9.4_08-3.66.1"
}
]
}
],
"release": "hpe helion openstack 8",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2020:1886-1",
"fixed_version": "4.9.4_08-3.66.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2020:1886-1",
"provider_updated_at": "2026-02-04T02:16:55.521830Z",
"applicability_unknown": true
},
{
"name": "xen",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.9.4_08-3.66.1"
}
]
}
],
"release": "openstack cloud 8",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2020:1886-1",
"fixed_version": "4.9.4_08-3.66.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2020:1886-1",
"provider_updated_at": "2026-02-04T02:16:55.521830Z",
"applicability_unknown": true
},
{
"name": "xen",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.9.4_08-3.66.1"
}
]
}
],
"release": "openstack cloud crowbar 8",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2020:1886-1",
"fixed_version": "4.9.4_08-3.66.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2020:1886-1",
"provider_updated_at": "2026-02-04T02:16:55.521830Z",
"applicability_unknown": true
},
{
"name": "xen",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.9.4_08-3.66.1"
}
]
}
],
"release": "linux enterprise server for sap applications 12 sp3",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2020:1886-1",
"fixed_version": "4.9.4_08-3.66.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2020:1886-1",
"provider_updated_at": "2026-02-04T02:16:55.521830Z",
"applicability_unknown": true
},
{
"name": "xen",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.9.4_08-3.66.1"
}
]
}
],
"release": "linux enterprise server 12 sp3-ltss",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2020:1886-1",
"fixed_version": "4.9.4_08-3.66.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2020:1886-1",
"provider_updated_at": "2026-02-04T02:16:55.521830Z",
"applicability_unknown": true
},
{
"name": "xen",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.9.4_08-3.66.1"
}
]
}
],
"release": "linux enterprise server 12 sp3-bcl",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2020:1886-1",
"fixed_version": "4.9.4_08-3.66.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2020:1886-1",
"provider_updated_at": "2026-02-04T02:16:55.521830Z",
"applicability_unknown": true
},
{
"name": "xen",
"distro": "suse",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.9.4_08-3.66.1"
}
]
}
],
"release": "enterprise storage 5",
"versions": [],
"ecosystem": "rpm",
"provider_url": "https://osv.dev/vulnerability/SUSE-SU-2020:1886-1",
"fixed_version": "4.9.4_08-3.66.1",
"provider_source": "pypi",
"provider_record_id": "SUSE-SU-2020:1886-1",
"provider_updated_at": "2026-02-04T02:16:55.521830Z",
"applicability_unknown": true
}
]
}OpenFactory catalog packages
Matching against OpenFactory catalog package versions is in progress.
[Debian 12 (Bookworm)]
- [libxencall1]Unknown
Source package: [xen]
Details (4)
4.17.5+72-g01140da4e8-1· amd64 · bookwormFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookwormFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· amd64 · bookworm-securityFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookworm-securityFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
- [libxen-dev]Unknown
Source package: [xen]
Details (4)
4.17.5+72-g01140da4e8-1· amd64 · bookwormFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookwormFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· amd64 · bookworm-securityFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookworm-securityFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
- [libxendevicemodel1]Unknown
Source package: [xen]
Details (4)
4.17.5+72-g01140da4e8-1· amd64 · bookwormFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookwormFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· amd64 · bookworm-securityFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookworm-securityFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
- [libxenevtchn1]Unknown
Source package: [xen]
Details (4)
4.17.5+72-g01140da4e8-1· amd64 · bookwormFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookwormFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· amd64 · bookworm-securityFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookworm-securityFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
- [libxenforeignmemory1]Unknown
Source package: [xen]
Details (4)
4.17.5+72-g01140da4e8-1· amd64 · bookwormFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookwormFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· amd64 · bookworm-securityFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookworm-securityFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
- [libxengnttab1]Unknown
Source package: [xen]
Details (4)
4.17.5+72-g01140da4e8-1· amd64 · bookwormFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookwormFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· amd64 · bookworm-securityFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookworm-securityFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
- [libxenhypfs1]Unknown
Source package: [xen]
Details (4)
4.17.5+72-g01140da4e8-1· amd64 · bookwormFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookwormFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· amd64 · bookworm-securityFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookworm-securityFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
- [libxenmisc4.17]Unknown
Source package: [xen]
Details (4)
4.17.5+72-g01140da4e8-1· amd64 · bookwormFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookwormFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· amd64 · bookworm-securityFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookworm-securityFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
- [libxenstore4]Unknown
Source package: [xen]
Details (4)
4.17.5+72-g01140da4e8-1· amd64 · bookwormFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookwormFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· amd64 · bookworm-securityFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookworm-securityFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
- [libxentoolcore1]Unknown
Source package: [xen]
Details (4)
4.17.5+72-g01140da4e8-1· amd64 · bookwormFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookwormFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· amd64 · bookworm-securityFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookworm-securityFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
- [libxentoollog1]Unknown
Source package: [xen]
Details (4)
4.17.5+72-g01140da4e8-1· amd64 · bookwormFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookwormFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· amd64 · bookworm-securityFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookworm-securityFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
- [xen-doc]Unknown
Source package: [xen]
Details (4)
4.17.5+72-g01140da4e8-1· amd64 · bookwormFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookwormFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· amd64 · bookworm-securityFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookworm-securityFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
- [xen-hypervisor-4.17-amd64]Unknown
Source package: [xen]
Details (2)
4.17.5+72-g01140da4e8-1· amd64 · bookwormFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· amd64 · bookworm-securityFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
- [xen-hypervisor-4.17-amd64-dbg]Unknown
Source package: [xen]
Details (2)
4.17.5+72-g01140da4e8-1· amd64 · bookwormFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· amd64 · bookworm-securityFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
- [xen-hypervisor-4.17-arm64]Unknown
Source package: [xen]
Details (2)
4.17.5+72-g01140da4e8-1· arm64 · bookwormFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookworm-securityFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
- [xen-hypervisor-4.17-arm64-dbg]Unknown
Source package: [xen]
Details (2)
4.17.5+72-g01140da4e8-1· arm64 · bookwormFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookworm-securityFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
- [xen-hypervisor-common]Unknown
Source package: [xen]
Details (4)
4.17.5+72-g01140da4e8-1· amd64 · bookwormFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookwormFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· amd64 · bookworm-securityFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookworm-securityFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
- [xenstore-utils]Unknown
Source package: [xen]
Details (4)
4.17.5+72-g01140da4e8-1· amd64 · bookwormFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookwormFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· amd64 · bookworm-securityFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookworm-securityFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
- [xen-system-amd64]Unknown
Source package: [xen]
Details (2)
4.17.5+72-g01140da4e8-1· amd64 · bookwormFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· amd64 · bookworm-securityFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
- [xen-system-arm64]Unknown
Source package: [xen]
Details (2)
4.17.5+72-g01140da4e8-1· arm64 · bookwormFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookworm-securityFixed · Fixed:
4.11.4+24-gddaaccbbab-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/suse-su-2020_1886-1.json]
- [https://osv.dev/vulnerability/ALPINE-CVE-2020-15563]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2020-15563]
- [https://osv.dev/vulnerability/SUSE-SU-2020:1886-1]
- [https://osv.dev/vulnerability/SUSE-SU-2020:1888-1]
- [https://osv.dev/vulnerability/SUSE-SU-2020:1891-1]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2020-15563]
- [https://security-tracker.debian.org/tracker/CVE-2020-15563]
- [https://security.access.redhat.com/data/csaf/v2/vex/2020/cve-2020-15563.json]
[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]