CVE catalog

CVE-2020-15567

xen affected and fixed versions

An issue was discovered in Xen through 4.13.x, allowing Intel guest OS users to gain privileges or cause a denial of service because of non-atomic modification of a live EPT PTE. When mapping guest EPT (nested paging) tables, Xen would in some circumstances use a series of non-atomic bitfield writes. Depending on the compiler version and optimisation flags, Xen might expose a dangerous partially written PTE to the hardware, which an attacker might be able to race to exploit. A guest administrator or perhaps even an unprivileged guest user might be able to cause denial of service, data corruption, or privilege escalation. Only systems using Intel CPUs are vulnerable. Systems using AMD CPUs, and Arm systems, are not vulnerable. Only systems using nested paging (hap, aka nested paging, aka in this case Intel EPT) are vulnerable. Only HVM and PVH guests can exploit the vulnerability. The presence and scope of the vulnerability depends on the precise optimisations performed by the compiler used to build Xen. If the compiler generates (a) a single 64-bit write, or (b) a series of read-modify-write operations in the same order as the source code, the hypervisor is not vulnerable. For example, in one test build using GCC 8.3 with normal settings, the compiler generated multiple (unlocked) read-modify-write operations in source-code order, which did not constitute a vulnerability. We have not been able to survey compilers; consequently we cannot say which compiler(s) might produce vulnerable code (with which code-generation options). The source code clearly violates the C rules, and thus should be considered vulnerable.

Severity: High · CVSS 7.5CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:H
Published: Jul 7, 2020, 12:00:00 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.28% · Oct 27, 2026

Projects and upstream resources

[xen][Source-reported homepage]

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / release	Package	Version	Status	Source
Debiantrixie-security	xen	`4.20.4+39-gf1e1321c87-0+deb13u1`	Fixed	[CVE-2020-15567]
Debiantrixie	xen	`4.11.4+24-gddaaccbbab-1`	FixedDistribution-reported fixed boundary	[CVE-2020-15567]
Debiantrixie	xen	`4.20.3+127-gc42374a105-0+deb13u1`	Fixed	[CVE-2020-15567]
Debiansid	xen	`4.11.4+24-gddaaccbbab-1`	FixedDistribution-reported fixed boundary	[CVE-2020-15567]
Debiansid	xen	`4.20.4+39-gf1e1321c87-1`	Fixed	[CVE-2020-15567]
Debianforky	xen	`4.11.4+24-gddaaccbbab-1`	FixedDistribution-reported fixed boundary	[CVE-2020-15567]
Debianforky	xen	`4.20.4+39-gf1e1321c87-1`	Fixed	[CVE-2020-15567]
Debianbookworm-security	xen	`4.17.7-0+deb12u1`	Fixed	[CVE-2020-15567]
Debianbookworm	xen	`4.11.4+24-gddaaccbbab-1`	FixedDistribution-reported fixed boundary	[CVE-2020-15567]
Debianbookworm	xen	`4.17.5+72-g01140da4e8-1`	Fixed	[CVE-2020-15567]

Showing 10 fix observations. All 48 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence

Distribution / release	Package	Version	Status	Source
Alpine3.10	xen	`4.12.3-r2`	UnknownSource applicability is not established	[ALPINE-CVE-2020-15567]Oct 26, 2026, 11:17:55 AM UTC
Alpine3.11	xen	`4.13.1-r2`	UnknownSource applicability is not established	[ALPINE-CVE-2020-15567]Oct 26, 2026, 11:17:55 AM UTC
Alpine3.12	xen	`4.13.1-r2`	UnknownSource applicability is not established	[ALPINE-CVE-2020-15567]Oct 26, 2026, 11:17:55 AM UTC
Alpine3.13	xen	`4.13.1-r4`	UnknownSource applicability is not established	[ALPINE-CVE-2020-15567]Oct 26, 2026, 11:17:55 AM UTC
Alpine3.14	xen	`4.13.1-r4`	UnknownSource applicability is not established	[ALPINE-CVE-2020-15567]Oct 26, 2026, 11:17:55 AM UTC
Alpine3.15	xen	`4.13.1-r4`	UnknownSource applicability is not established	[ALPINE-CVE-2020-15567]Oct 26, 2026, 11:17:55 AM UTC
Alpine3.16	xen	`4.13.1-r4`	UnknownSource applicability is not established	[ALPINE-CVE-2020-15567]Oct 26, 2026, 11:17:55 AM UTC
Alpine3.17	xen	`4.13.1-r4`	UnknownSource applicability is not established	[ALPINE-CVE-2020-15567]Oct 26, 2026, 11:17:55 AM UTC
Alpine3.18	xen	`4.13.1-r4`	UnknownSource applicability is not established	[ALPINE-CVE-2020-15567]Oct 26, 2026, 11:17:55 AM UTC
Alpine3.19	xen	`4.13.1-r4`	UnknownSource applicability is not established	[ALPINE-CVE-2020-15567]Oct 26, 2026, 11:17:55 AM UTC
Alpine3.20	xen	`4.13.1-r4`	UnknownSource applicability is not established	[ALPINE-CVE-2020-15567]Oct 26, 2026, 11:17:55 AM UTC
Alpine3.21	xen	`4.13.1-r4`	UnknownSource applicability is not established	[ALPINE-CVE-2020-15567]Oct 26, 2026, 11:17:55 AM UTC
Alpine3.22	xen	`4.13.1-r4`	UnknownSource applicability is not established	[ALPINE-CVE-2020-15567]Oct 26, 2026, 11:17:55 AM UTC
Alpine3.23	xen	`4.13.1-r4`	UnknownSource applicability is not established	[ALPINE-CVE-2020-15567]Oct 26, 2026, 11:17:55 AM UTC
Alpine3.24	xen	`4.13.1-r4`	UnknownSource applicability is not established	[ALPINE-CVE-2020-15567]Oct 26, 2026, 11:17:55 AM UTC
Alpine3.9	xen	`4.11.4-r0`	UnknownSource applicability is not established	[ALPINE-CVE-2020-15567]Oct 26, 2026, 11:17:55 AM UTC
Debianbookworm	xen	`4.11.4+24-gddaaccbbab-1`	FixedDistribution-reported fixed boundary	[CVE-2020-15567]
Debianbookworm	xen	`4.17.5+72-g01140da4e8-1`	Fixed	[CVE-2020-15567]
Debianbookworm-security	xen	`4.17.7-0+deb12u1`	Fixed	[CVE-2020-15567]
Debianforky	xen	`4.11.4+24-gddaaccbbab-1`	FixedDistribution-reported fixed boundary	[CVE-2020-15567]
Debianforky	xen	`4.20.4+39-gf1e1321c87-1`	Fixed	[CVE-2020-15567]
Debiansid	xen	`4.11.4+24-gddaaccbbab-1`	FixedDistribution-reported fixed boundary	[CVE-2020-15567]
Debiansid	xen	`4.20.4+39-gf1e1321c87-1`	Fixed	[CVE-2020-15567]
Debiantrixie	xen	`4.11.4+24-gddaaccbbab-1`	FixedDistribution-reported fixed boundary	[CVE-2020-15567]
Debiantrixie	xen	`4.20.3+127-gc42374a105-0+deb13u1`	Fixed	[CVE-2020-15567]
Debiantrixie-security	xen	`4.20.4+39-gf1e1321c87-0+deb13u1`	Fixed	[CVE-2020-15567]
Ubuntu16.04	xen	`4.5.1-0ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2020-15567]Apr 22, 2026, 12:19:16 PM UTC
Ubuntu16.04	xen	`4.5.1-0ubuntu2`	UnknownSource applicability is not established	[UBUNTU-CVE-2020-15567]Apr 22, 2026, 12:19:16 PM UTC
Ubuntu16.04	xen	`4.6.0-1ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2020-15567]Apr 22, 2026, 12:19:16 PM UTC
Ubuntu16.04	xen	`4.6.0-1ubuntu2`	UnknownSource applicability is not established	[UBUNTU-CVE-2020-15567]Apr 22, 2026, 12:19:16 PM UTC
Ubuntu16.04	xen	`4.6.0-1ubuntu4`	UnknownSource applicability is not established	[UBUNTU-CVE-2020-15567]Apr 22, 2026, 12:19:16 PM UTC
Ubuntu16.04	xen	`4.6.0-1ubuntu4.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2020-15567]Apr 22, 2026, 12:19:16 PM UTC
Ubuntu16.04	xen	`4.6.0-1ubuntu4.2`	UnknownSource applicability is not established	[UBUNTU-CVE-2020-15567]Apr 22, 2026, 12:19:16 PM UTC
Ubuntu16.04	xen	`4.6.0-1ubuntu4.3`	UnknownSource applicability is not established	[UBUNTU-CVE-2020-15567]Apr 22, 2026, 12:19:16 PM UTC
Ubuntu16.04	xen	`4.6.5-0ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2020-15567]Apr 22, 2026, 12:19:16 PM UTC
Ubuntu16.04	xen	`4.6.5-0ubuntu1.1`	UnknownSource applicability is not established	[UBUNTU-CVE-2020-15567]Apr 22, 2026, 12:19:16 PM UTC
Ubuntu16.04	xen	`4.6.5-0ubuntu1.2`	UnknownSource applicability is not established	[UBUNTU-CVE-2020-15567]Apr 22, 2026, 12:19:16 PM UTC
Ubuntu16.04	xen	`4.6.5-0ubuntu1.4`	UnknownSource applicability is not established	[UBUNTU-CVE-2020-15567]Apr 22, 2026, 12:19:16 PM UTC
Ubuntu18.04	xen	`4.9.0-0ubuntu3`	UnknownSource applicability is not established	[UBUNTU-CVE-2020-15567]Apr 22, 2026, 12:19:16 PM UTC
Ubuntu18.04	xen	`4.9.0-0ubuntu4`	UnknownSource applicability is not established	[UBUNTU-CVE-2020-15567]Apr 22, 2026, 12:19:16 PM UTC
Ubuntu18.04	xen	`4.9.2-0ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2020-15567]Apr 22, 2026, 12:19:16 PM UTC
Ubuntu20.04	xen	`4.11.3+24-g14b62ab3e5-1ubuntu1`	UnknownSource applicability is not established	[UBUNTU-CVE-2020-15567]Apr 22, 2026, 12:19:16 PM UTC
Ubuntu20.04	xen	`4.11.3+24-g14b62ab3e5-1ubuntu2`	UnknownSource applicability is not established	[UBUNTU-CVE-2020-15567]Apr 22, 2026, 12:19:16 PM UTC
Ubuntu20.04	xen	`4.11.3+24-g14b62ab3e5-1ubuntu2.2`	UnknownSource applicability is not established	[UBUNTU-CVE-2020-15567]Apr 22, 2026, 12:19:16 PM UTC
Ubuntu20.04	xen	`4.11.3+24-g14b62ab3e5-1ubuntu2.3`	UnknownSource applicability is not established	[UBUNTU-CVE-2020-15567]Apr 22, 2026, 12:19:16 PM UTC
Ubuntu20.04	xen	`4.9.2-0ubuntu2`	UnknownSource applicability is not established	[UBUNTU-CVE-2020-15567]Apr 22, 2026, 12:19:16 PM UTC
Ubuntu20.04	xen	`4.9.2-0ubuntu6`	UnknownSource applicability is not established	[UBUNTU-CVE-2020-15567]Apr 22, 2026, 12:19:16 PM UTC
Ubuntu20.04	xen	`4.9.2-0ubuntu7`	UnknownSource applicability is not established	[UBUNTU-CVE-2020-15567]Apr 22, 2026, 12:19:16 PM UTC

Original provider fields

{
  "package_releases": [
    {
      "name": "xen",
      "status": "fixed",
      "release": "sid",
      "version": "4.20.4+39-gf1e1321c87-1"
    },
    {
      "name": "xen",
      "status": "fixed",
      "release": "forky",
      "version": "4.20.4+39-gf1e1321c87-1"
    },
    {
      "name": "xen",
      "status": "fixed",
      "release": "trixie",
      "version": "4.20.3+127-gc42374a105-0+deb13u1"
    },
    {
      "name": "xen",
      "status": "fixed",
      "release": "trixie-security",
      "version": "4.20.4+39-gf1e1321c87-0+deb13u1"
    },
    {
      "name": "xen",
      "status": "fixed",
      "release": "bookworm",
      "version": "4.17.5+72-g01140da4e8-1"
    },
    {
      "name": "xen",
      "status": "fixed",
      "release": "bookworm-security",
      "version": "4.17.7-0+deb12u1"
    }
  ],
  "fixed_versions": [
    {
      "bug": null,
      "name": "xen",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "4.11.4+24-gddaaccbbab-1"
    },
    {
      "bug": null,
      "name": "xen",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "4.11.4+24-gddaaccbbab-1"
    },
    {
      "bug": null,
      "name": "xen",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": "4.11.4+24-gddaaccbbab-1"
    },
    {
      "bug": null,
      "name": "xen",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": "4.11.4+24-gddaaccbbab-1"
    }
  ],
  "distribution_packages": [
    {
      "name": "xen",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.12.3-r2"
            }
          ]
        }
      ],
      "release": "3.10",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-15567",
      "fixed_version": "4.12.3-r2",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2020-15567",
      "provider_updated_at": "2026-10-26T11:17:55.136261996Z",
      "applicability_unknown": true
    },
    {
      "name": "xen",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.13.1-r2"
            }
          ]
        }
      ],
      "release": "3.11",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-15567",
      "fixed_version": "4.13.1-r2",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2020-15567",
      "provider_updated_at": "2026-10-26T11:17:55.136261996Z",
      "applicability_unknown": true
    },
    {
      "name": "xen",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.13.1-r2"
            }
          ]
        }
      ],
      "release": "3.12",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-15567",
      "fixed_version": "4.13.1-r2",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2020-15567",
      "provider_updated_at": "2026-10-26T11:17:55.136261996Z",
      "applicability_unknown": true
    },
    {
      "name": "xen",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.13.1-r4"
            }
          ]
        }
      ],
      "release": "3.13",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-15567",
      "fixed_version": "4.13.1-r4",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2020-15567",
      "provider_updated_at": "2026-10-26T11:17:55.136261996Z",
      "applicability_unknown": true
    },
    {
      "name": "xen",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.13.1-r4"
            }
          ]
        }
      ],
      "release": "3.14",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-15567",
      "fixed_version": "4.13.1-r4",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2020-15567",
      "provider_updated_at": "2026-10-26T11:17:55.136261996Z",
      "applicability_unknown": true
    },
    {
      "name": "xen",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.13.1-r4"
            }
          ]
        }
      ],
      "release": "3.15",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-15567",
      "fixed_version": "4.13.1-r4",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2020-15567",
      "provider_updated_at": "2026-10-26T11:17:55.136261996Z",
      "applicability_unknown": true
    },
    {
      "name": "xen",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.13.1-r4"
            }
          ]
        }
      ],
      "release": "3.16",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-15567",
      "fixed_version": "4.13.1-r4",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2020-15567",
      "provider_updated_at": "2026-10-26T11:17:55.136261996Z",
      "applicability_unknown": true
    },
    {
      "name": "xen",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.13.1-r4"
            }
          ]
        }
      ],
      "release": "3.17",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-15567",
      "fixed_version": "4.13.1-r4",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2020-15567",
      "provider_updated_at": "2026-10-26T11:17:55.136261996Z",
      "applicability_unknown": true
    },
    {
      "name": "xen",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.13.1-r4"
            }
          ]
        }
      ],
      "release": "3.18",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-15567",
      "fixed_version": "4.13.1-r4",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2020-15567",
      "provider_updated_at": "2026-10-26T11:17:55.136261996Z",
      "applicability_unknown": true
    },
    {
      "name": "xen",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.13.1-r4"
            }
          ]
        }
      ],
      "release": "3.19",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-15567",
      "fixed_version": "4.13.1-r4",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2020-15567",
      "provider_updated_at": "2026-10-26T11:17:55.136261996Z",
      "applicability_unknown": true
    },
    {
      "name": "xen",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.13.1-r4"
            }
          ]
        }
      ],
      "release": "3.20",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-15567",
      "fixed_version": "4.13.1-r4",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2020-15567",
      "provider_updated_at": "2026-10-26T11:17:55.136261996Z",
      "applicability_unknown": true
    },
    {
      "name": "xen",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.13.1-r4"
            }
          ]
        }
      ],
      "release": "3.21",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-15567",
      "fixed_version": "4.13.1-r4",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2020-15567",
      "provider_updated_at": "2026-10-26T11:17:55.136261996Z",
      "applicability_unknown": true
    },
    {
      "name": "xen",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.13.1-r4"
            }
          ]
        }
      ],
      "release": "3.22",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-15567",
      "fixed_version": "4.13.1-r4",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2020-15567",
      "provider_updated_at": "2026-10-26T11:17:55.136261996Z",
      "applicability_unknown": true
    },
    {
      "name": "xen",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.13.1-r4"
            }
          ]
        }
      ],
      "release": "3.23",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-15567",
      "fixed_version": "4.13.1-r4",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2020-15567",
      "provider_updated_at": "2026-10-26T11:17:55.136261996Z",
      "applicability_unknown": true
    },
    {
      "name": "xen",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.13.1-r4"
            }
          ]
        }
      ],
      "release": "3.24",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-15567",
      "fixed_version": "4.13.1-r4",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2020-15567",
      "provider_updated_at": "2026-10-26T11:17:55.136261996Z",
      "applicability_unknown": true
    },
    {
      "name": "xen",
      "distro": "alpine",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.11.4-r0"
            }
          ]
        }
      ],
      "release": "3.9",
      "versions": [],
      "ecosystem": "apk",
      "provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2020-15567",
      "fixed_version": "4.11.4-r0",
      "provider_source": "pypi",
      "provider_record_id": "ALPINE-CVE-2020-15567",
      "provider_updated_at": "2026-10-26T11:17:55.136261996Z",
      "applicability_unknown": true
    },
    {
      "name": "xen",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "16.04",
      "versions": [
        "4.5.1-0ubuntu1",
        "4.5.1-0ubuntu2",
        "4.6.0-1ubuntu1",
        "4.6.0-1ubuntu2",
        "4.6.0-1ubuntu4",
        "4.6.0-1ubuntu4.1",
        "4.6.0-1ubuntu4.2",
        "4.6.0-1ubuntu4.3",
        "4.6.5-0ubuntu1",
        "4.6.5-0ubuntu1.1",
        "4.6.5-0ubuntu1.2",
        "4.6.5-0ubuntu1.4"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2020-15567",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2020-15567",
      "provider_updated_at": "2026-04-22T12:19:16.741587Z",
      "applicability_unknown": true
    },
    {
      "name": "xen",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ],
      "release": "18.04",
      "versions": [
        "4.9.0-0ubuntu3",
        "4.9.0-0ubuntu4",
        "4.9.2-0ubuntu1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2020-15567",
      "fixed_version": "",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2020-15567",
      "provider_updated_at": "2026-04-22T12:19:16.741587Z",
      "applicability_unknown": true
    },
    {
      "name": "xen",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.11.3+24-g14b62ab3e5-1ubuntu2.3"
            }
          ]
        }
      ],
      "release": "20.04",
      "versions": [
        "4.9.2-0ubuntu2",
        "4.9.2-0ubuntu6",
        "4.9.2-0ubuntu7",
        "4.11.3+24-g14b62ab3e5-1ubuntu1",
        "4.11.3+24-g14b62ab3e5-1ubuntu2",
        "4.11.3+24-g14b62ab3e5-1ubuntu2.2"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2020-15567",
      "fixed_version": "4.11.3+24-g14b62ab3e5-1ubuntu2.3",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2020-15567",
      "provider_updated_at": "2026-04-22T12:19:16.741587Z",
      "applicability_unknown": true
    }
  ]
}

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

[libxencall1]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[libxen-dev]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[libxendevicemodel1]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[libxenevtchn1]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[libxenforeignmemory1]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[libxengnttab1]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[libxenhypfs1]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[libxenmisc4.17]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[libxenstore4]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[libxentoolcore1]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[libxentoollog1]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[xen-doc]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[xen-hypervisor-4.17-amd64]Unknown
Source package: [xen]
Details (2)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[xen-hypervisor-4.17-amd64-dbg]Unknown
Source package: [xen]
Details (2)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[xen-hypervisor-4.17-arm64]Unknown
Source package: [xen]
Details (2)
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[xen-hypervisor-4.17-arm64-dbg]Unknown
Source package: [xen]
Details (2)
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[xen-hypervisor-common]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[xenstore-utils]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[xen-system-amd64]Unknown
Source package: [xen]
Details (2)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
[xen-system-arm64]Unknown
Source package: [xen]
Details (2)
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Fixed · Fixed: 4.11.4+24-gddaaccbbab-1
  dsa · xen · debian · bookworm; dsa · xen · debian · 12

Next results

Observed: Oct 23, 2026, 5:48:18 PM UTC

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]