
CVE catalog
CVE-2021-28705
xen affected and fixed versions
issues with partially successful P2M updates on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] x86 HVM and PVH guests may be started in populate-on-demand (PoD) mode, to provide a way for them to later easily have more memory assigned. Guests are permitted to control certain P2M aspects of individual pages via hypercalls. These hypercalls may act on ranges of pages specified via page orders (resulting in a power-of-2 number of pages). In some cases the hypervisor carries out the requests by splitting them into smaller chunks. Error handling in certain PoD cases has been insufficient in that in particular partial success of some operations was not properly accounted for. There are two code paths affected - page removal (CVE-2021-28705) and insertion of new pages (CVE-2021-28709). (We provide one patch which combines the fix to both issues.)
- Severity
- Medium · CVSS 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.36% · Oct 27, 2026
Projects and upstream resources
Reported versions and fixes
Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.
| Distribution / release | Package | Version | Status | Source |
|---|---|---|---|---|
| Debiantrixie-security | xen | 4.20.4+39-gf1e1321c87-0+deb13u1 | Fixed | [CVE-2021-28705] |
| Debiantrixie | xen | 4.14.3+32-g9de3671772-1 | FixedDistribution-reported fixed boundary | [CVE-2021-28705] |
| Debiantrixie | xen | 4.20.3+127-gc42374a105-0+deb13u1 | Fixed | [CVE-2021-28705] |
| Debiansid | xen | 4.14.3+32-g9de3671772-1 | FixedDistribution-reported fixed boundary | [CVE-2021-28705] |
| Debiansid | xen | 4.20.4+39-gf1e1321c87-1 | Fixed | [CVE-2021-28705] |
| Debianforky | xen | 4.14.3+32-g9de3671772-1 | FixedDistribution-reported fixed boundary | [CVE-2021-28705] |
| Debianforky | xen | 4.20.4+39-gf1e1321c87-1 | Fixed | [CVE-2021-28705] |
| Debianbookworm-security | xen | 4.17.7-0+deb12u1 | Fixed | [CVE-2021-28705] |
| Debianbookworm | xen | 4.14.3+32-g9de3671772-1 | FixedDistribution-reported fixed boundary | [CVE-2021-28705] |
| Debianbookworm | xen | 4.17.5+72-g01140da4e8-1 | Fixed | [CVE-2021-28705] |
| Alpine3.24 | xen | 4.15.1-r2 | Fixed | [ALPINE-CVE-2021-28705] |
| Alpine3.23 | xen | 4.15.1-r2 | Fixed | [ALPINE-CVE-2021-28705] |
Showing 12 fix observations. All 24 observations, including unknown and conflicting reports, are available below.
Provider details and historical evidence
| Distribution / release | Package | Version | Status | Source |
|---|---|---|---|---|
| Alpine3.11 | xen | 4.13.4-r2 | Fixed | [ALPINE-CVE-2021-28705] |
| Alpine3.12 | xen | 4.13.4-r2 | Fixed | [ALPINE-CVE-2021-28705] |
| Alpine3.13 | xen | 4.14.3-r2 | Fixed | [ALPINE-CVE-2021-28705] |
| Alpine3.14 | xen | 4.15.1-r2 | Fixed | [ALPINE-CVE-2021-28705] |
| Alpine3.15 | xen | 4.15.1-r2 | Fixed | [ALPINE-CVE-2021-28705] |
| Alpine3.16 | xen | 4.15.1-r2 | Fixed | [ALPINE-CVE-2021-28705] |
| Alpine3.17 | xen | 4.15.1-r2 | Fixed | [ALPINE-CVE-2021-28705] |
| Alpine3.18 | xen | 4.15.1-r2 | Fixed | [ALPINE-CVE-2021-28705] |
| Alpine3.19 | xen | 4.15.1-r2 | Fixed | [ALPINE-CVE-2021-28705] |
| Alpine3.20 | xen | 4.15.1-r2 | Fixed | [ALPINE-CVE-2021-28705] |
| Alpine3.21 | xen | 4.15.1-r2 | Fixed | [ALPINE-CVE-2021-28705] |
| Alpine3.22 | xen | 4.15.1-r2 | Fixed | [ALPINE-CVE-2021-28705] |
| Alpine3.23 | xen | 4.15.1-r2 | Fixed | [ALPINE-CVE-2021-28705] |
| Alpine3.24 | xen | 4.15.1-r2 | Fixed | [ALPINE-CVE-2021-28705] |
| Debianbookworm | xen | 4.14.3+32-g9de3671772-1 | FixedDistribution-reported fixed boundary | [CVE-2021-28705] |
| Debianbookworm | xen | 4.17.5+72-g01140da4e8-1 | Fixed | [CVE-2021-28705] |
| Debianbookworm-security | xen | 4.17.7-0+deb12u1 | Fixed | [CVE-2021-28705] |
| Debianforky | xen | 4.14.3+32-g9de3671772-1 | FixedDistribution-reported fixed boundary | [CVE-2021-28705] |
| Debianforky | xen | 4.20.4+39-gf1e1321c87-1 | Fixed | [CVE-2021-28705] |
| Debiansid | xen | 4.14.3+32-g9de3671772-1 | FixedDistribution-reported fixed boundary | [CVE-2021-28705] |
| Debiansid | xen | 4.20.4+39-gf1e1321c87-1 | Fixed | [CVE-2021-28705] |
| Debiantrixie | xen | 4.14.3+32-g9de3671772-1 | FixedDistribution-reported fixed boundary | [CVE-2021-28705] |
| Debiantrixie | xen | 4.20.3+127-gc42374a105-0+deb13u1 | Fixed | [CVE-2021-28705] |
| Debiantrixie-security | xen | 4.20.4+39-gf1e1321c87-0+deb13u1 | Fixed | [CVE-2021-28705] |
Original provider fields
{
"package_releases": [
{
"name": "xen",
"status": "fixed",
"release": "sid",
"version": "4.20.4+39-gf1e1321c87-1"
},
{
"name": "xen",
"status": "fixed",
"release": "forky",
"version": "4.20.4+39-gf1e1321c87-1"
},
{
"name": "xen",
"status": "fixed",
"release": "trixie",
"version": "4.20.3+127-gc42374a105-0+deb13u1"
},
{
"name": "xen",
"status": "fixed",
"release": "trixie-security",
"version": "4.20.4+39-gf1e1321c87-0+deb13u1"
},
{
"name": "xen",
"status": "fixed",
"release": "bookworm",
"version": "4.17.5+72-g01140da4e8-1"
},
{
"name": "xen",
"status": "fixed",
"release": "bookworm-security",
"version": "4.17.7-0+deb12u1"
}
],
"fixed_versions": [
{
"bug": null,
"name": "xen",
"type": "source",
"origin": null,
"release": "sid",
"urgency": "not yet assigned",
"fixed_version": "4.14.3+32-g9de3671772-1"
},
{
"bug": null,
"name": "xen",
"type": "source",
"origin": null,
"release": "forky",
"urgency": "not yet assigned",
"fixed_version": "4.14.3+32-g9de3671772-1"
},
{
"bug": null,
"name": "xen",
"type": "source",
"origin": null,
"release": "trixie",
"urgency": "not yet assigned",
"fixed_version": "4.14.3+32-g9de3671772-1"
},
{
"bug": null,
"name": "xen",
"type": "source",
"origin": null,
"release": "bookworm",
"urgency": "not yet assigned",
"fixed_version": "4.14.3+32-g9de3671772-1"
}
],
"distribution_packages": [
{
"name": "xen",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "3.4.0"
},
{
"fixed": "4.13.4-r2"
}
]
}
],
"release": "3.11",
"versions": [],
"ecosystem": "apk",
"provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2021-28705",
"fixed_version": "4.13.4-r2",
"provider_source": "pypi",
"provider_record_id": "ALPINE-CVE-2021-28705",
"provider_updated_at": "2026-10-23T17:17:56.177664696Z"
},
{
"name": "xen",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "3.4.0"
},
{
"fixed": "4.13.4-r2"
}
]
}
],
"release": "3.12",
"versions": [],
"ecosystem": "apk",
"provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2021-28705",
"fixed_version": "4.13.4-r2",
"provider_source": "pypi",
"provider_record_id": "ALPINE-CVE-2021-28705",
"provider_updated_at": "2026-10-23T17:17:56.177664696Z"
},
{
"name": "xen",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "3.4.0"
},
{
"fixed": "4.14.3-r2"
}
]
}
],
"release": "3.13",
"versions": [],
"ecosystem": "apk",
"provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2021-28705",
"fixed_version": "4.14.3-r2",
"provider_source": "pypi",
"provider_record_id": "ALPINE-CVE-2021-28705",
"provider_updated_at": "2026-10-23T17:17:56.177664696Z"
},
{
"name": "xen",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "3.4.0"
},
{
"fixed": "4.15.1-r2"
}
]
}
],
"release": "3.14",
"versions": [],
"ecosystem": "apk",
"provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2021-28705",
"fixed_version": "4.15.1-r2",
"provider_source": "pypi",
"provider_record_id": "ALPINE-CVE-2021-28705",
"provider_updated_at": "2026-10-23T17:17:56.177664696Z"
},
{
"name": "xen",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "3.4.0"
},
{
"fixed": "4.15.1-r2"
}
]
}
],
"release": "3.15",
"versions": [],
"ecosystem": "apk",
"provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2021-28705",
"fixed_version": "4.15.1-r2",
"provider_source": "pypi",
"provider_record_id": "ALPINE-CVE-2021-28705",
"provider_updated_at": "2026-10-23T17:17:56.177664696Z"
},
{
"name": "xen",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "3.4.0"
},
{
"fixed": "4.15.1-r2"
}
]
}
],
"release": "3.16",
"versions": [],
"ecosystem": "apk",
"provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2021-28705",
"fixed_version": "4.15.1-r2",
"provider_source": "pypi",
"provider_record_id": "ALPINE-CVE-2021-28705",
"provider_updated_at": "2026-10-23T17:17:56.177664696Z"
},
{
"name": "xen",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "3.4.0"
},
{
"fixed": "4.15.1-r2"
}
]
}
],
"release": "3.17",
"versions": [],
"ecosystem": "apk",
"provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2021-28705",
"fixed_version": "4.15.1-r2",
"provider_source": "pypi",
"provider_record_id": "ALPINE-CVE-2021-28705",
"provider_updated_at": "2026-10-23T17:17:56.177664696Z"
},
{
"name": "xen",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "3.4.0"
},
{
"fixed": "4.15.1-r2"
}
]
}
],
"release": "3.18",
"versions": [],
"ecosystem": "apk",
"provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2021-28705",
"fixed_version": "4.15.1-r2",
"provider_source": "pypi",
"provider_record_id": "ALPINE-CVE-2021-28705",
"provider_updated_at": "2026-10-23T17:17:56.177664696Z"
},
{
"name": "xen",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "3.4.0"
},
{
"fixed": "4.15.1-r2"
}
]
}
],
"release": "3.19",
"versions": [],
"ecosystem": "apk",
"provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2021-28705",
"fixed_version": "4.15.1-r2",
"provider_source": "pypi",
"provider_record_id": "ALPINE-CVE-2021-28705",
"provider_updated_at": "2026-10-23T17:17:56.177664696Z"
},
{
"name": "xen",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "3.4.0"
},
{
"fixed": "4.15.1-r2"
}
]
}
],
"release": "3.20",
"versions": [],
"ecosystem": "apk",
"provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2021-28705",
"fixed_version": "4.15.1-r2",
"provider_source": "pypi",
"provider_record_id": "ALPINE-CVE-2021-28705",
"provider_updated_at": "2026-10-23T17:17:56.177664696Z"
},
{
"name": "xen",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "3.4.0"
},
{
"fixed": "4.15.1-r2"
}
]
}
],
"release": "3.21",
"versions": [],
"ecosystem": "apk",
"provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2021-28705",
"fixed_version": "4.15.1-r2",
"provider_source": "pypi",
"provider_record_id": "ALPINE-CVE-2021-28705",
"provider_updated_at": "2026-10-23T17:17:56.177664696Z"
},
{
"name": "xen",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "3.4.0"
},
{
"fixed": "4.15.1-r2"
}
]
}
],
"release": "3.22",
"versions": [],
"ecosystem": "apk",
"provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2021-28705",
"fixed_version": "4.15.1-r2",
"provider_source": "pypi",
"provider_record_id": "ALPINE-CVE-2021-28705",
"provider_updated_at": "2026-10-23T17:17:56.177664696Z"
},
{
"name": "xen",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "3.4.0"
},
{
"fixed": "4.15.1-r2"
}
]
}
],
"release": "3.23",
"versions": [],
"ecosystem": "apk",
"provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2021-28705",
"fixed_version": "4.15.1-r2",
"provider_source": "pypi",
"provider_record_id": "ALPINE-CVE-2021-28705",
"provider_updated_at": "2026-10-23T17:17:56.177664696Z"
},
{
"name": "xen",
"distro": "alpine",
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "3.4.0"
},
{
"fixed": "4.15.1-r2"
}
]
}
],
"release": "3.24",
"versions": [],
"ecosystem": "apk",
"provider_url": "https://osv.dev/vulnerability/ALPINE-CVE-2021-28705",
"fixed_version": "4.15.1-r2",
"provider_source": "pypi",
"provider_record_id": "ALPINE-CVE-2021-28705",
"provider_updated_at": "2026-10-23T17:17:56.177664696Z"
}
]
}OpenFactory catalog packages
Matching against OpenFactory catalog package versions is in progress.
[Debian 12 (Bookworm)]
- [libxencall1]Unknown
Source package: [xen]
Details (4)
4.17.5+72-g01140da4e8-1· amd64 · bookwormFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookwormFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· amd64 · bookworm-securityFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookworm-securityFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
- [libxen-dev]Unknown
Source package: [xen]
Details (4)
4.17.5+72-g01140da4e8-1· amd64 · bookwormFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookwormFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· amd64 · bookworm-securityFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookworm-securityFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
- [libxendevicemodel1]Unknown
Source package: [xen]
Details (4)
4.17.5+72-g01140da4e8-1· amd64 · bookwormFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookwormFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· amd64 · bookworm-securityFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookworm-securityFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
- [libxenevtchn1]Unknown
Source package: [xen]
Details (4)
4.17.5+72-g01140da4e8-1· amd64 · bookwormFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookwormFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· amd64 · bookworm-securityFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookworm-securityFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
- [libxenforeignmemory1]Unknown
Source package: [xen]
Details (4)
4.17.5+72-g01140da4e8-1· amd64 · bookwormFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookwormFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· amd64 · bookworm-securityFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookworm-securityFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
- [libxengnttab1]Unknown
Source package: [xen]
Details (4)
4.17.5+72-g01140da4e8-1· amd64 · bookwormFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookwormFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· amd64 · bookworm-securityFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookworm-securityFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
- [libxenhypfs1]Unknown
Source package: [xen]
Details (4)
4.17.5+72-g01140da4e8-1· amd64 · bookwormFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookwormFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· amd64 · bookworm-securityFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookworm-securityFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
- [libxenmisc4.17]Unknown
Source package: [xen]
Details (4)
4.17.5+72-g01140da4e8-1· amd64 · bookwormFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookwormFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· amd64 · bookworm-securityFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookworm-securityFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
- [libxenstore4]Unknown
Source package: [xen]
Details (4)
4.17.5+72-g01140da4e8-1· amd64 · bookwormFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookwormFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· amd64 · bookworm-securityFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookworm-securityFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
- [libxentoolcore1]Unknown
Source package: [xen]
Details (4)
4.17.5+72-g01140da4e8-1· amd64 · bookwormFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookwormFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· amd64 · bookworm-securityFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookworm-securityFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
- [libxentoollog1]Unknown
Source package: [xen]
Details (4)
4.17.5+72-g01140da4e8-1· amd64 · bookwormFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookwormFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· amd64 · bookworm-securityFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookworm-securityFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
- [xen-doc]Unknown
Source package: [xen]
Details (4)
4.17.5+72-g01140da4e8-1· amd64 · bookwormFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookwormFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· amd64 · bookworm-securityFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookworm-securityFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
- [xen-hypervisor-4.17-amd64]Unknown
Source package: [xen]
Details (2)
4.17.5+72-g01140da4e8-1· amd64 · bookwormFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· amd64 · bookworm-securityFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
- [xen-hypervisor-4.17-amd64-dbg]Unknown
Source package: [xen]
Details (2)
4.17.5+72-g01140da4e8-1· amd64 · bookwormFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· amd64 · bookworm-securityFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
- [xen-hypervisor-4.17-arm64]Unknown
Source package: [xen]
Details (2)
4.17.5+72-g01140da4e8-1· arm64 · bookwormFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookworm-securityFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
- [xen-hypervisor-4.17-arm64-dbg]Unknown
Source package: [xen]
Details (2)
4.17.5+72-g01140da4e8-1· arm64 · bookwormFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookworm-securityFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
- [xen-hypervisor-common]Unknown
Source package: [xen]
Details (4)
4.17.5+72-g01140da4e8-1· amd64 · bookwormFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookwormFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· amd64 · bookworm-securityFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookworm-securityFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
- [xenstore-utils]Unknown
Source package: [xen]
Details (4)
4.17.5+72-g01140da4e8-1· amd64 · bookwormFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookwormFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· amd64 · bookworm-securityFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookworm-securityFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
- [xen-system-amd64]Unknown
Source package: [xen]
Details (2)
4.17.5+72-g01140da4e8-1· amd64 · bookwormFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· amd64 · bookworm-securityFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
- [xen-system-arm64]Unknown
Source package: [xen]
Details (2)
4.17.5+72-g01140da4e8-1· arm64 · bookwormFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
4.17.5+72-g01140da4e8-1· arm64 · bookworm-securityFixed · Fixed:
4.14.3+32-g9de3671772-1dsa · xen · debian · bookworm; dsa · xen · debian · 12
Observed:
References
- [https://ftp.suse.com/pub/projects/security/csaf/suse-su-2021_14848-1.json]
- [https://osv.dev/vulnerability/ALPINE-CVE-2021-28705]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2021-28705]
- [https://security-tracker.debian.org/tracker/CVE-2021-28705]
- [https://wid.cert-bund.de/.well-known/csaf/white/2021/wid-sec-w-2024-0281.json]
[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]