{"id":"ALPINE-CVE-2023-34325","details":"\n[This CNA information record relates to multiple CVEs; the\ntext explains which aspects/vulnerabilities correspond to which CVE.]\n\nlibfsimage contains parsing code for several filesystems, most of them based on\ngrub-legacy code.  libfsimage is used by pygrub to inspect guest disks.\n\nPygrub runs as the same user as the toolstack (root in a priviledged domain).\n\nAt least one issue has been reported to the Xen Security Team that allows an\nattacker to trigger a stack buffer overflow in libfsimage.  After further\nanalisys the Xen Security Team is no longer confident in the suitability of\nlibfsimage when run against guest controlled input with super user priviledges.\n\nIn order to not affect current deployments that rely on pygrub patches are\nprovided in the resolution section of the advisory that allow running pygrub in\ndeprivileged mode.\n\nCVE-2023-4949 refers to the original issue in the upstream grub\nproject (\"An attacker with local access to a system (either through a\ndisk or external drive) can present a modified XFS partition to\ngrub-legacy in such a way to exploit a memory corruption in grub’s XFS\nfile system implementation.\")  CVE-2023-34325 refers specifically to\nthe vulnerabilities in Xen's copy of libfsimage, which is decended\nfrom a very old version of grub.\n","modified":"2025-12-03T22:52:49.554705Z","published":"2024-01-05T17:15:08.590Z","upstream":["CVE-2023-34325"],"references":[{"type":"ADVISORY","url":"https://security.alpinelinux.org/vuln/CVE-2023-34325"}],"affected":[{"package":{"name":"xen","ecosystem":"Alpine:v3.15","purl":"pkg:apk/alpine/xen?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.15.5-r3"}]}],"versions":["4.0.1-r0","4.0.1-r1","4.0.1-r2","4.0.1-r3","4.1.0-r0","4.1.0-r1","4.1.0-r2","4.1.1-r0","4.1.1-r1","4.1.1-r2","4.1.2-r10","4.1.2-r11","4.1.2-r12","4.1.2-r3","4.1.2-r4","4.1.2-r5","4.1.2-r6","4.1.2-r7","4.1.2-r8","4.1.2-r9","4.1.3-r0","4.10.0-r0","4.10.0-r1","4.10.0-r2","4.10.0-r3","4.10.1-r0","4.10.1-r1","4.10.1-r2","4.11.0-r0","4.11.0-r1","4.11.1-r0","4.11.1-r1","4.12.0-r0","4.12.0-r1","4.12.0-r2","4.12.0-r3","4.12.1-r0","4.12.1-r1","4.12.1-r2","4.13.0-r0","4.13.0-r1","4.13.0-r2","4.13.0-r3","4.13.0-r4","4.13.1-r0","4.13.1-r1","4.13.1-r2","4.13.1-r3","4.13.1-r4","4.13.1-r5","4.14.0-r0","4.14.0-r1","4.14.0-r2","4.14.0-r3","4.14.1-r0","4.14.1-r1","4.14.1-r2","4.14.1-r3","4.14.1-r4","4.14.1-r5","4.15.0-r0","4.15.0-r1","4.15.0-r2","4.15.0-r3","4.15.0-r4","4.15.0-r5","4.15.1-r0","4.15.1-r1","4.15.1-r2","4.15.2-r0","4.15.2-r1","4.15.2-r2","4.15.3-r0","4.15.3-r1","4.15.3-r2","4.15.3-r3","4.15.4-r0","4.15.4-r1","4.15.4-r2","4.15.4-r3","4.15.5-r0","4.15.5-r1","4.15.5-r2","4.2.0-r0","4.2.0-r1","4.2.0-r2","4.2.0-r3","4.2.0-r4","4.2.0-r5","4.2.0-r6","4.2.0-r7","4.2.1-r0","4.2.1-r1","4.2.1-r10","4.2.1-r11","4.2.1-r2","4.2.1-r3","4.2.1-r4","4.2.1-r5","4.2.1-r6","4.2.1-r7","4.2.1-r8","4.2.1-r9","4.2.2-r0","4.2.2-r10","4.2.2-r11","4.2.2-r2","4.2.2-r3","4.2.2-r4","4.2.2-r5","4.2.2-r6","4.2.2-r7","4.2.2-r8","4.2.2-r9","4.3.0-r0","4.3.0-r1","4.3.0-r2","4.3.0-r3","4.3.0-r4","4.3.0-r5","4.3.0-r6","4.3.0-r7","4.3.0-r8","4.3.1-r0","4.3.1-r1","4.3.1-r2","4.3.1-r3","4.3.2-r0","4.3.2-r1","4.3.2-r2","4.3.2-r3","4.3.2-r4","4.3.3-r0","4.4.1-r0","4.4.1-r1","4.4.1-r2","4.4.1-r3","4.4.1-r4","4.4.1-r5","4.4.1-r6","4.4.1-r7","4.4.1-r8","4.4.2-r0","4.4.2-r1","4.5.0-r0","4.5.0-r1","4.5.1-r0","4.5.1-r1","4.5.1-r2","4.5.1-r3","4.6.0-r0","4.6.0-r1","4.6.0-r2","4.6.0-r3","4.6.0-r4","4.6.0-r5","4.6.1-r0","4.6.1-r1","4.6.1-r2","4.6.3-r0","4.6.3-r1","4.7.0-r0","4.7.0-r1","4.7.0-r2","4.7.0-r3","4.7.0-r4","4.7.0-r5","4.7.1-r0","4.7.1-r1","4.7.1-r2","4.7.1-r3","4.7.1-r4","4.7.1-r5","4.7.2-r0","4.8.1-r0","4.8.1-r1","4.8.1-r2","4.8.1-r3","4.8.1-r4","4.9.0-r0","4.9.0-r1","4.9.0-r2","4.9.0-r3","4.9.0-r4","4.9.0-r5","4.9.0-r6","4.9.0-r7","4.9.0-r8","4.9.1-r0","4.9.1-r1","4.9.1-r2","4.9.1-r3"],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2023-34325.json"}},{"package":{"name":"xen","ecosystem":"Alpine:v3.16","purl":"pkg:apk/alpine/xen?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.5-r3"}]}],"versions":["4.0.1-r0","4.0.1-r1","4.0.1-r2","4.0.1-r3","4.1.0-r0","4.1.0-r1","4.1.0-r2","4.1.1-r0","4.1.1-r1","4.1.1-r2","4.1.2-r10","4.1.2-r11","4.1.2-r12","4.1.2-r3","4.1.2-r4","4.1.2-r5","4.1.2-r6","4.1.2-r7","4.1.2-r8","4.1.2-r9","4.1.3-r0","4.10.0-r0","4.10.0-r1","4.10.0-r2","4.10.0-r3","4.10.1-r0","4.10.1-r1","4.10.1-r2","4.11.0-r0","4.11.0-r1","4.11.1-r0","4.11.1-r1","4.12.0-r0","4.12.0-r1","4.12.0-r2","4.12.0-r3","4.12.1-r0","4.12.1-r1","4.12.1-r2","4.13.0-r0","4.13.0-r1","4.13.0-r2","4.13.0-r3","4.13.0-r4","4.13.1-r0","4.13.1-r1","4.13.1-r2","4.13.1-r3","4.13.1-r4","4.13.1-r5","4.14.0-r0","4.14.0-r1","4.14.0-r2","4.14.0-r3","4.14.1-r0","4.14.1-r1","4.14.1-r2","4.14.1-r3","4.14.1-r4","4.14.1-r5","4.15.0-r0","4.15.0-r1","4.15.0-r2","4.15.0-r3","4.15.0-r4","4.15.0-r5","4.15.1-r0","4.15.1-r1","4.15.1-r2","4.15.1-r3","4.16.0-r0","4.16.0-r1","4.16.1-r0","4.16.1-r1","4.16.1-r2","4.16.1-r3","4.16.1-r4","4.16.1-r5","4.16.1-r6","4.16.2-r0","4.16.3-r0","4.16.4-r0","4.16.4-r1","4.16.4-r2","4.16.4-r3","4.16.5-r0","4.16.5-r1","4.16.5-r2","4.2.0-r0","4.2.0-r1","4.2.0-r2","4.2.0-r3","4.2.0-r4","4.2.0-r5","4.2.0-r6","4.2.0-r7","4.2.1-r0","4.2.1-r1","4.2.1-r10","4.2.1-r11","4.2.1-r2","4.2.1-r3","4.2.1-r4","4.2.1-r5","4.2.1-r6","4.2.1-r7","4.2.1-r8","4.2.1-r9","4.2.2-r0","4.2.2-r10","4.2.2-r11","4.2.2-r2","4.2.2-r3","4.2.2-r4","4.2.2-r5","4.2.2-r6","4.2.2-r7","4.2.2-r8","4.2.2-r9","4.3.0-r0","4.3.0-r1","4.3.0-r2","4.3.0-r3","4.3.0-r4","4.3.0-r5","4.3.0-r6","4.3.0-r7","4.3.0-r8","4.3.1-r0","4.3.1-r1","4.3.1-r2","4.3.1-r3","4.3.2-r0","4.3.2-r1","4.3.2-r2","4.3.2-r3","4.3.2-r4","4.3.3-r0","4.4.1-r0","4.4.1-r1","4.4.1-r2","4.4.1-r3","4.4.1-r4","4.4.1-r5","4.4.1-r6","4.4.1-r7","4.4.1-r8","4.4.2-r0","4.4.2-r1","4.5.0-r0","4.5.0-r1","4.5.1-r0","4.5.1-r1","4.5.1-r2","4.5.1-r3","4.6.0-r0","4.6.0-r1","4.6.0-r2","4.6.0-r3","4.6.0-r4","4.6.0-r5","4.6.1-r0","4.6.1-r1","4.6.1-r2","4.6.3-r0","4.6.3-r1","4.7.0-r0","4.7.0-r1","4.7.0-r2","4.7.0-r3","4.7.0-r4","4.7.0-r5","4.7.1-r0","4.7.1-r1","4.7.1-r2","4.7.1-r3","4.7.1-r4","4.7.1-r5","4.7.2-r0","4.8.1-r0","4.8.1-r1","4.8.1-r2","4.8.1-r3","4.8.1-r4","4.9.0-r0","4.9.0-r1","4.9.0-r2","4.9.0-r3","4.9.0-r4","4.9.0-r5","4.9.0-r6","4.9.0-r7","4.9.0-r8","4.9.1-r0","4.9.1-r1","4.9.1-r2","4.9.1-r3"],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2023-34325.json"}},{"package":{"name":"xen","ecosystem":"Alpine:v3.17","purl":"pkg:apk/alpine/xen?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.5-r3"}]}],"versions":["4.0.1-r0","4.0.1-r1","4.0.1-r2","4.0.1-r3","4.1.0-r0","4.1.0-r1","4.1.0-r2","4.1.1-r0","4.1.1-r1","4.1.1-r2","4.1.2-r10","4.1.2-r11","4.1.2-r12","4.1.2-r3","4.1.2-r4","4.1.2-r5","4.1.2-r6","4.1.2-r7","4.1.2-r8","4.1.2-r9","4.1.3-r0","4.10.0-r0","4.10.0-r1","4.10.0-r2","4.10.0-r3","4.10.1-r0","4.10.1-r1","4.10.1-r2","4.11.0-r0","4.11.0-r1","4.11.1-r0","4.11.1-r1","4.12.0-r0","4.12.0-r1","4.12.0-r2","4.12.0-r3","4.12.1-r0","4.12.1-r1","4.12.1-r2","4.13.0-r0","4.13.0-r1","4.13.0-r2","4.13.0-r3","4.13.0-r4","4.13.1-r0","4.13.1-r1","4.13.1-r2","4.13.1-r3","4.13.1-r4","4.13.1-r5","4.14.0-r0","4.14.0-r1","4.14.0-r2","4.14.0-r3","4.14.1-r0","4.14.1-r1","4.14.1-r2","4.14.1-r3","4.14.1-r4","4.14.1-r5","4.15.0-r0","4.15.0-r1","4.15.0-r2","4.15.0-r3","4.15.0-r4","4.15.0-r5","4.15.1-r0","4.15.1-r1","4.15.1-r2","4.15.1-r3","4.16.0-r0","4.16.0-r1","4.16.1-r0","4.16.1-r1","4.16.1-r2","4.16.1-r3","4.16.1-r4","4.16.1-r5","4.16.1-r6","4.16.1-r7","4.16.2-r0","4.16.2-r1","4.16.2-r2","4.16.3-r0","4.16.4-r0","4.16.4-r1","4.16.4-r2","4.16.4-r3","4.16.5-r0","4.16.5-r1","4.16.5-r2","4.2.0-r0","4.2.0-r1","4.2.0-r2","4.2.0-r3","4.2.0-r4","4.2.0-r5","4.2.0-r6","4.2.0-r7","4.2.1-r0","4.2.1-r1","4.2.1-r10","4.2.1-r11","4.2.1-r2","4.2.1-r3","4.2.1-r4","4.2.1-r5","4.2.1-r6","4.2.1-r7","4.2.1-r8","4.2.1-r9","4.2.2-r0","4.2.2-r10","4.2.2-r11","4.2.2-r2","4.2.2-r3","4.2.2-r4","4.2.2-r5","4.2.2-r6","4.2.2-r7","4.2.2-r8","4.2.2-r9","4.3.0-r0","4.3.0-r1","4.3.0-r2","4.3.0-r3","4.3.0-r4","4.3.0-r5","4.3.0-r6","4.3.0-r7","4.3.0-r8","4.3.1-r0","4.3.1-r1","4.3.1-r2","4.3.1-r3","4.3.2-r0","4.3.2-r1","4.3.2-r2","4.3.2-r3","4.3.2-r4","4.3.3-r0","4.4.1-r0","4.4.1-r1","4.4.1-r2","4.4.1-r3","4.4.1-r4","4.4.1-r5","4.4.1-r6","4.4.1-r7","4.4.1-r8","4.4.2-r0","4.4.2-r1","4.5.0-r0","4.5.0-r1","4.5.1-r0","4.5.1-r1","4.5.1-r2","4.5.1-r3","4.6.0-r0","4.6.0-r1","4.6.0-r2","4.6.0-r3","4.6.0-r4","4.6.0-r5","4.6.1-r0","4.6.1-r1","4.6.1-r2","4.6.3-r0","4.6.3-r1","4.7.0-r0","4.7.0-r1","4.7.0-r2","4.7.0-r3","4.7.0-r4","4.7.0-r5","4.7.1-r0","4.7.1-r1","4.7.1-r2","4.7.1-r3","4.7.1-r4","4.7.1-r5","4.7.2-r0","4.8.1-r0","4.8.1-r1","4.8.1-r2","4.8.1-r3","4.8.1-r4","4.9.0-r0","4.9.0-r1","4.9.0-r2","4.9.0-r3","4.9.0-r4","4.9.0-r5","4.9.0-r6","4.9.0-r7","4.9.0-r8","4.9.1-r0","4.9.1-r1","4.9.1-r2","4.9.1-r3"],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2023-34325.json"}},{"package":{"name":"xen","ecosystem":"Alpine:v3.18","purl":"pkg:apk/alpine/xen?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.2-r3"}]}],"versions":["4.0.1-r0","4.0.1-r1","4.0.1-r2","4.0.1-r3","4.1.0-r0","4.1.0-r1","4.1.0-r2","4.1.1-r0","4.1.1-r1","4.1.1-r2","4.1.2-r10","4.1.2-r11","4.1.2-r12","4.1.2-r3","4.1.2-r4","4.1.2-r5","4.1.2-r6","4.1.2-r7","4.1.2-r8","4.1.2-r9","4.1.3-r0","4.10.0-r0","4.10.0-r1","4.10.0-r2","4.10.0-r3","4.10.1-r0","4.10.1-r1","4.10.1-r2","4.11.0-r0","4.11.0-r1","4.11.1-r0","4.11.1-r1","4.12.0-r0","4.12.0-r1","4.12.0-r2","4.12.0-r3","4.12.1-r0","4.12.1-r1","4.12.1-r2","4.13.0-r0","4.13.0-r1","4.13.0-r2","4.13.0-r3","4.13.0-r4","4.13.1-r0","4.13.1-r1","4.13.1-r2","4.13.1-r3","4.13.1-r4","4.13.1-r5","4.14.0-r0","4.14.0-r1","4.14.0-r2","4.14.0-r3","4.14.1-r0","4.14.1-r1","4.14.1-r2","4.14.1-r3","4.14.1-r4","4.14.1-r5","4.15.0-r0","4.15.0-r1","4.15.0-r2","4.15.0-r3","4.15.0-r4","4.15.0-r5","4.15.1-r0","4.15.1-r1","4.15.1-r2","4.15.1-r3","4.16.0-r0","4.16.0-r1","4.16.1-r0","4.16.1-r1","4.16.1-r2","4.16.1-r3","4.16.1-r4","4.16.1-r5","4.16.1-r6","4.16.1-r7","4.16.2-r0","4.16.2-r1","4.16.2-r2","4.16.2-r3","4.17.0-r0","4.17.0-r1","4.17.0-r2","4.17.0-r3","4.17.0-r4","4.17.0-r5","4.17.1-r0","4.17.1-r1","4.17.1-r2","4.17.1-r3","4.17.1-r4","4.17.2-r0","4.17.2-r1","4.17.2-r2","4.2.0-r0","4.2.0-r1","4.2.0-r2","4.2.0-r3","4.2.0-r4","4.2.0-r5","4.2.0-r6","4.2.0-r7","4.2.1-r0","4.2.1-r1","4.2.1-r10","4.2.1-r11","4.2.1-r2","4.2.1-r3","4.2.1-r4","4.2.1-r5","4.2.1-r6","4.2.1-r7","4.2.1-r8","4.2.1-r9","4.2.2-r0","4.2.2-r10","4.2.2-r11","4.2.2-r2","4.2.2-r3","4.2.2-r4","4.2.2-r5","4.2.2-r6","4.2.2-r7","4.2.2-r8","4.2.2-r9","4.3.0-r0","4.3.0-r1","4.3.0-r2","4.3.0-r3","4.3.0-r4","4.3.0-r5","4.3.0-r6","4.3.0-r7","4.3.0-r8","4.3.1-r0","4.3.1-r1","4.3.1-r2","4.3.1-r3","4.3.2-r0","4.3.2-r1","4.3.2-r2","4.3.2-r3","4.3.2-r4","4.3.3-r0","4.4.1-r0","4.4.1-r1","4.4.1-r2","4.4.1-r3","4.4.1-r4","4.4.1-r5","4.4.1-r6","4.4.1-r7","4.4.1-r8","4.4.2-r0","4.4.2-r1","4.5.0-r0","4.5.0-r1","4.5.1-r0","4.5.1-r1","4.5.1-r2","4.5.1-r3","4.6.0-r0","4.6.0-r1","4.6.0-r2","4.6.0-r3","4.6.0-r4","4.6.0-r5","4.6.1-r0","4.6.1-r1","4.6.1-r2","4.6.3-r0","4.6.3-r1","4.7.0-r0","4.7.0-r1","4.7.0-r2","4.7.0-r3","4.7.0-r4","4.7.0-r5","4.7.1-r0","4.7.1-r1","4.7.1-r2","4.7.1-r3","4.7.1-r4","4.7.1-r5","4.7.2-r0","4.8.1-r0","4.8.1-r1","4.8.1-r2","4.8.1-r3","4.8.1-r4","4.9.0-r0","4.9.0-r1","4.9.0-r2","4.9.0-r3","4.9.0-r4","4.9.0-r5","4.9.0-r6","4.9.0-r7","4.9.0-r8","4.9.1-r0","4.9.1-r1","4.9.1-r2","4.9.1-r3"],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2023-34325.json"}},{"package":{"name":"xen","ecosystem":"Alpine:v3.19","purl":"pkg:apk/alpine/xen?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.2-r3"}]}],"versions":["4.0.1-r0","4.0.1-r1","4.0.1-r2","4.0.1-r3","4.1.0-r0","4.1.0-r1","4.1.0-r2","4.1.1-r0","4.1.1-r1","4.1.1-r2","4.1.2-r10","4.1.2-r11","4.1.2-r12","4.1.2-r3","4.1.2-r4","4.1.2-r5","4.1.2-r6","4.1.2-r7","4.1.2-r8","4.1.2-r9","4.1.3-r0","4.10.0-r0","4.10.0-r1","4.10.0-r2","4.10.0-r3","4.10.1-r0","4.10.1-r1","4.10.1-r2","4.11.0-r0","4.11.0-r1","4.11.1-r0","4.11.1-r1","4.12.0-r0","4.12.0-r1","4.12.0-r2","4.12.0-r3","4.12.1-r0","4.12.1-r1","4.12.1-r2","4.13.0-r0","4.13.0-r1","4.13.0-r2","4.13.0-r3","4.13.0-r4","4.13.1-r0","4.13.1-r1","4.13.1-r2","4.13.1-r3","4.13.1-r4","4.13.1-r5","4.14.0-r0","4.14.0-r1","4.14.0-r2","4.14.0-r3","4.14.1-r0","4.14.1-r1","4.14.1-r2","4.14.1-r3","4.14.1-r4","4.14.1-r5","4.15.0-r0","4.15.0-r1","4.15.0-r2","4.15.0-r3","4.15.0-r4","4.15.0-r5","4.15.1-r0","4.15.1-r1","4.15.1-r2","4.15.1-r3","4.16.0-r0","4.16.0-r1","4.16.1-r0","4.16.1-r1","4.16.1-r2","4.16.1-r3","4.16.1-r4","4.16.1-r5","4.16.1-r6","4.16.1-r7","4.16.2-r0","4.16.2-r1","4.16.2-r2","4.16.2-r3","4.17.0-r0","4.17.0-r1","4.17.0-r2","4.17.0-r3","4.17.0-r4","4.17.0-r5","4.17.1-r0","4.17.1-r1","4.17.1-r2","4.17.1-r3","4.17.1-r4","4.17.1-r5","4.17.2-r0","4.17.2-r1","4.17.2-r2","4.2.0-r0","4.2.0-r1","4.2.0-r2","4.2.0-r3","4.2.0-r4","4.2.0-r5","4.2.0-r6","4.2.0-r7","4.2.1-r0","4.2.1-r1","4.2.1-r10","4.2.1-r11","4.2.1-r2","4.2.1-r3","4.2.1-r4","4.2.1-r5","4.2.1-r6","4.2.1-r7","4.2.1-r8","4.2.1-r9","4.2.2-r0","4.2.2-r10","4.2.2-r11","4.2.2-r2","4.2.2-r3","4.2.2-r4","4.2.2-r5","4.2.2-r6","4.2.2-r7","4.2.2-r8","4.2.2-r9","4.3.0-r0","4.3.0-r1","4.3.0-r2","4.3.0-r3","4.3.0-r4","4.3.0-r5","4.3.0-r6","4.3.0-r7","4.3.0-r8","4.3.1-r0","4.3.1-r1","4.3.1-r2","4.3.1-r3","4.3.2-r0","4.3.2-r1","4.3.2-r2","4.3.2-r3","4.3.2-r4","4.3.3-r0","4.4.1-r0","4.4.1-r1","4.4.1-r2","4.4.1-r3","4.4.1-r4","4.4.1-r5","4.4.1-r6","4.4.1-r7","4.4.1-r8","4.4.2-r0","4.4.2-r1","4.5.0-r0","4.5.0-r1","4.5.1-r0","4.5.1-r1","4.5.1-r2","4.5.1-r3","4.6.0-r0","4.6.0-r1","4.6.0-r2","4.6.0-r3","4.6.0-r4","4.6.0-r5","4.6.1-r0","4.6.1-r1","4.6.1-r2","4.6.3-r0","4.6.3-r1","4.7.0-r0","4.7.0-r1","4.7.0-r2","4.7.0-r3","4.7.0-r4","4.7.0-r5","4.7.1-r0","4.7.1-r1","4.7.1-r2","4.7.1-r3","4.7.1-r4","4.7.1-r5","4.7.2-r0","4.8.1-r0","4.8.1-r1","4.8.1-r2","4.8.1-r3","4.8.1-r4","4.9.0-r0","4.9.0-r1","4.9.0-r2","4.9.0-r3","4.9.0-r4","4.9.0-r5","4.9.0-r6","4.9.0-r7","4.9.0-r8","4.9.1-r0","4.9.1-r1","4.9.1-r2","4.9.1-r3"],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2023-34325.json"}},{"package":{"name":"xen","ecosystem":"Alpine:v3.20","purl":"pkg:apk/alpine/xen?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.2-r3"}]}],"versions":["4.0.1-r0","4.0.1-r1","4.0.1-r2","4.0.1-r3","4.1.0-r0","4.1.0-r1","4.1.0-r2","4.1.1-r0","4.1.1-r1","4.1.1-r2","4.1.2-r10","4.1.2-r11","4.1.2-r12","4.1.2-r3","4.1.2-r4","4.1.2-r5","4.1.2-r6","4.1.2-r7","4.1.2-r8","4.1.2-r9","4.1.3-r0","4.10.0-r0","4.10.0-r1","4.10.0-r2","4.10.0-r3","4.10.1-r0","4.10.1-r1","4.10.1-r2","4.11.0-r0","4.11.0-r1","4.11.1-r0","4.11.1-r1","4.12.0-r0","4.12.0-r1","4.12.0-r2","4.12.0-r3","4.12.1-r0","4.12.1-r1","4.12.1-r2","4.13.0-r0","4.13.0-r1","4.13.0-r2","4.13.0-r3","4.13.0-r4","4.13.1-r0","4.13.1-r1","4.13.1-r2","4.13.1-r3","4.13.1-r4","4.13.1-r5","4.14.0-r0","4.14.0-r1","4.14.0-r2","4.14.0-r3","4.14.1-r0","4.14.1-r1","4.14.1-r2","4.14.1-r3","4.14.1-r4","4.14.1-r5","4.15.0-r0","4.15.0-r1","4.15.0-r2","4.15.0-r3","4.15.0-r4","4.15.0-r5","4.15.1-r0","4.15.1-r1","4.15.1-r2","4.15.1-r3","4.16.0-r0","4.16.0-r1","4.16.1-r0","4.16.1-r1","4.16.1-r2","4.16.1-r3","4.16.1-r4","4.16.1-r5","4.16.1-r6","4.16.1-r7","4.16.2-r0","4.16.2-r1","4.16.2-r2","4.16.2-r3","4.17.0-r0","4.17.0-r1","4.17.0-r2","4.17.0-r3","4.17.0-r4","4.17.0-r5","4.17.1-r0","4.17.1-r1","4.17.1-r2","4.17.1-r3","4.17.1-r4","4.17.1-r5","4.17.2-r0","4.17.2-r1","4.17.2-r2","4.2.0-r0","4.2.0-r1","4.2.0-r2","4.2.0-r3","4.2.0-r4","4.2.0-r5","4.2.0-r6","4.2.0-r7","4.2.1-r0","4.2.1-r1","4.2.1-r10","4.2.1-r11","4.2.1-r2","4.2.1-r3","4.2.1-r4","4.2.1-r5","4.2.1-r6","4.2.1-r7","4.2.1-r8","4.2.1-r9","4.2.2-r0","4.2.2-r10","4.2.2-r11","4.2.2-r2","4.2.2-r3","4.2.2-r4","4.2.2-r5","4.2.2-r6","4.2.2-r7","4.2.2-r8","4.2.2-r9","4.3.0-r0","4.3.0-r1","4.3.0-r2","4.3.0-r3","4.3.0-r4","4.3.0-r5","4.3.0-r6","4.3.0-r7","4.3.0-r8","4.3.1-r0","4.3.1-r1","4.3.1-r2","4.3.1-r3","4.3.2-r0","4.3.2-r1","4.3.2-r2","4.3.2-r3","4.3.2-r4","4.3.3-r0","4.4.1-r0","4.4.1-r1","4.4.1-r2","4.4.1-r3","4.4.1-r4","4.4.1-r5","4.4.1-r6","4.4.1-r7","4.4.1-r8","4.4.2-r0","4.4.2-r1","4.5.0-r0","4.5.0-r1","4.5.1-r0","4.5.1-r1","4.5.1-r2","4.5.1-r3","4.6.0-r0","4.6.0-r1","4.6.0-r2","4.6.0-r3","4.6.0-r4","4.6.0-r5","4.6.1-r0","4.6.1-r1","4.6.1-r2","4.6.3-r0","4.6.3-r1","4.7.0-r0","4.7.0-r1","4.7.0-r2","4.7.0-r3","4.7.0-r4","4.7.0-r5","4.7.1-r0","4.7.1-r1","4.7.1-r2","4.7.1-r3","4.7.1-r4","4.7.1-r5","4.7.2-r0","4.8.1-r0","4.8.1-r1","4.8.1-r2","4.8.1-r3","4.8.1-r4","4.9.0-r0","4.9.0-r1","4.9.0-r2","4.9.0-r3","4.9.0-r4","4.9.0-r5","4.9.0-r6","4.9.0-r7","4.9.0-r8","4.9.1-r0","4.9.1-r1","4.9.1-r2","4.9.1-r3"],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2023-34325.json"}},{"package":{"name":"xen","ecosystem":"Alpine:v3.21","purl":"pkg:apk/alpine/xen?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.2-r3"}]}],"versions":["4.0.1-r0","4.0.1-r1","4.0.1-r2","4.0.1-r3","4.1.0-r0","4.1.0-r1","4.1.0-r2","4.1.1-r0","4.1.1-r1","4.1.1-r2","4.1.2-r10","4.1.2-r11","4.1.2-r12","4.1.2-r3","4.1.2-r4","4.1.2-r5","4.1.2-r6","4.1.2-r7","4.1.2-r8","4.1.2-r9","4.1.3-r0","4.10.0-r0","4.10.0-r1","4.10.0-r2","4.10.0-r3","4.10.1-r0","4.10.1-r1","4.10.1-r2","4.11.0-r0","4.11.0-r1","4.11.1-r0","4.11.1-r1","4.12.0-r0","4.12.0-r1","4.12.0-r2","4.12.0-r3","4.12.1-r0","4.12.1-r1","4.12.1-r2","4.13.0-r0","4.13.0-r1","4.13.0-r2","4.13.0-r3","4.13.0-r4","4.13.1-r0","4.13.1-r1","4.13.1-r2","4.13.1-r3","4.13.1-r4","4.13.1-r5","4.14.0-r0","4.14.0-r1","4.14.0-r2","4.14.0-r3","4.14.1-r0","4.14.1-r1","4.14.1-r2","4.14.1-r3","4.14.1-r4","4.14.1-r5","4.15.0-r0","4.15.0-r1","4.15.0-r2","4.15.0-r3","4.15.0-r4","4.15.0-r5","4.15.1-r0","4.15.1-r1","4.15.1-r2","4.15.1-r3","4.16.0-r0","4.16.0-r1","4.16.1-r0","4.16.1-r1","4.16.1-r2","4.16.1-r3","4.16.1-r4","4.16.1-r5","4.16.1-r6","4.16.1-r7","4.16.2-r0","4.16.2-r1","4.16.2-r2","4.16.2-r3","4.17.0-r0","4.17.0-r1","4.17.0-r2","4.17.0-r3","4.17.0-r4","4.17.0-r5","4.17.1-r0","4.17.1-r1","4.17.1-r2","4.17.1-r3","4.17.1-r4","4.17.1-r5","4.17.2-r0","4.17.2-r1","4.17.2-r2","4.2.0-r0","4.2.0-r1","4.2.0-r2","4.2.0-r3","4.2.0-r4","4.2.0-r5","4.2.0-r6","4.2.0-r7","4.2.1-r0","4.2.1-r1","4.2.1-r10","4.2.1-r11","4.2.1-r2","4.2.1-r3","4.2.1-r4","4.2.1-r5","4.2.1-r6","4.2.1-r7","4.2.1-r8","4.2.1-r9","4.2.2-r0","4.2.2-r10","4.2.2-r11","4.2.2-r2","4.2.2-r3","4.2.2-r4","4.2.2-r5","4.2.2-r6","4.2.2-r7","4.2.2-r8","4.2.2-r9","4.3.0-r0","4.3.0-r1","4.3.0-r2","4.3.0-r3","4.3.0-r4","4.3.0-r5","4.3.0-r6","4.3.0-r7","4.3.0-r8","4.3.1-r0","4.3.1-r1","4.3.1-r2","4.3.1-r3","4.3.2-r0","4.3.2-r1","4.3.2-r2","4.3.2-r3","4.3.2-r4","4.3.3-r0","4.4.1-r0","4.4.1-r1","4.4.1-r2","4.4.1-r3","4.4.1-r4","4.4.1-r5","4.4.1-r6","4.4.1-r7","4.4.1-r8","4.4.2-r0","4.4.2-r1","4.5.0-r0","4.5.0-r1","4.5.1-r0","4.5.1-r1","4.5.1-r2","4.5.1-r3","4.6.0-r0","4.6.0-r1","4.6.0-r2","4.6.0-r3","4.6.0-r4","4.6.0-r5","4.6.1-r0","4.6.1-r1","4.6.1-r2","4.6.3-r0","4.6.3-r1","4.7.0-r0","4.7.0-r1","4.7.0-r2","4.7.0-r3","4.7.0-r4","4.7.0-r5","4.7.1-r0","4.7.1-r1","4.7.1-r2","4.7.1-r3","4.7.1-r4","4.7.1-r5","4.7.2-r0","4.8.1-r0","4.8.1-r1","4.8.1-r2","4.8.1-r3","4.8.1-r4","4.9.0-r0","4.9.0-r1","4.9.0-r2","4.9.0-r3","4.9.0-r4","4.9.0-r5","4.9.0-r6","4.9.0-r7","4.9.0-r8","4.9.1-r0","4.9.1-r1","4.9.1-r2","4.9.1-r3"],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2023-34325.json"}},{"package":{"name":"xen","ecosystem":"Alpine:v3.22","purl":"pkg:apk/alpine/xen?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.2-r3"}]}],"versions":["4.0.1-r0","4.0.1-r1","4.0.1-r2","4.0.1-r3","4.1.0-r0","4.1.0-r1","4.1.0-r2","4.1.1-r0","4.1.1-r1","4.1.1-r2","4.1.2-r10","4.1.2-r11","4.1.2-r12","4.1.2-r3","4.1.2-r4","4.1.2-r5","4.1.2-r6","4.1.2-r7","4.1.2-r8","4.1.2-r9","4.1.3-r0","4.10.0-r0","4.10.0-r1","4.10.0-r2","4.10.0-r3","4.10.1-r0","4.10.1-r1","4.10.1-r2","4.11.0-r0","4.11.0-r1","4.11.1-r0","4.11.1-r1","4.12.0-r0","4.12.0-r1","4.12.0-r2","4.12.0-r3","4.12.1-r0","4.12.1-r1","4.12.1-r2","4.13.0-r0","4.13.0-r1","4.13.0-r2","4.13.0-r3","4.13.0-r4","4.13.1-r0","4.13.1-r1","4.13.1-r2","4.13.1-r3","4.13.1-r4","4.13.1-r5","4.14.0-r0","4.14.0-r1","4.14.0-r2","4.14.0-r3","4.14.1-r0","4.14.1-r1","4.14.1-r2","4.14.1-r3","4.14.1-r4","4.14.1-r5","4.15.0-r0","4.15.0-r1","4.15.0-r2","4.15.0-r3","4.15.0-r4","4.15.0-r5","4.15.1-r0","4.15.1-r1","4.15.1-r2","4.15.1-r3","4.16.0-r0","4.16.0-r1","4.16.1-r0","4.16.1-r1","4.16.1-r2","4.16.1-r3","4.16.1-r4","4.16.1-r5","4.16.1-r6","4.16.1-r7","4.16.2-r0","4.16.2-r1","4.16.2-r2","4.16.2-r3","4.17.0-r0","4.17.0-r1","4.17.0-r2","4.17.0-r3","4.17.0-r4","4.17.0-r5","4.17.1-r0","4.17.1-r1","4.17.1-r2","4.17.1-r3","4.17.1-r4","4.17.1-r5","4.17.2-r0","4.17.2-r1","4.17.2-r2","4.2.0-r0","4.2.0-r1","4.2.0-r2","4.2.0-r3","4.2.0-r4","4.2.0-r5","4.2.0-r6","4.2.0-r7","4.2.1-r0","4.2.1-r1","4.2.1-r10","4.2.1-r11","4.2.1-r2","4.2.1-r3","4.2.1-r4","4.2.1-r5","4.2.1-r6","4.2.1-r7","4.2.1-r8","4.2.1-r9","4.2.2-r0","4.2.2-r10","4.2.2-r11","4.2.2-r2","4.2.2-r3","4.2.2-r4","4.2.2-r5","4.2.2-r6","4.2.2-r7","4.2.2-r8","4.2.2-r9","4.3.0-r0","4.3.0-r1","4.3.0-r2","4.3.0-r3","4.3.0-r4","4.3.0-r5","4.3.0-r6","4.3.0-r7","4.3.0-r8","4.3.1-r0","4.3.1-r1","4.3.1-r2","4.3.1-r3","4.3.2-r0","4.3.2-r1","4.3.2-r2","4.3.2-r3","4.3.2-r4","4.3.3-r0","4.4.1-r0","4.4.1-r1","4.4.1-r2","4.4.1-r3","4.4.1-r4","4.4.1-r5","4.4.1-r6","4.4.1-r7","4.4.1-r8","4.4.2-r0","4.4.2-r1","4.5.0-r0","4.5.0-r1","4.5.1-r0","4.5.1-r1","4.5.1-r2","4.5.1-r3","4.6.0-r0","4.6.0-r1","4.6.0-r2","4.6.0-r3","4.6.0-r4","4.6.0-r5","4.6.1-r0","4.6.1-r1","4.6.1-r2","4.6.3-r0","4.6.3-r1","4.7.0-r0","4.7.0-r1","4.7.0-r2","4.7.0-r3","4.7.0-r4","4.7.0-r5","4.7.1-r0","4.7.1-r1","4.7.1-r2","4.7.1-r3","4.7.1-r4","4.7.1-r5","4.7.2-r0","4.8.1-r0","4.8.1-r1","4.8.1-r2","4.8.1-r3","4.8.1-r4","4.9.0-r0","4.9.0-r1","4.9.0-r2","4.9.0-r3","4.9.0-r4","4.9.0-r5","4.9.0-r6","4.9.0-r7","4.9.0-r8","4.9.1-r0","4.9.1-r1","4.9.1-r2","4.9.1-r3"],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2023-34325.json"}},{"package":{"name":"xen","ecosystem":"Alpine:v3.23","purl":"pkg:apk/alpine/xen?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.17.2-r3"}]}],"versions":["4.0.1-r0","4.0.1-r1","4.0.1-r2","4.0.1-r3","4.1.0-r0","4.1.0-r1","4.1.0-r2","4.1.1-r0","4.1.1-r1","4.1.1-r2","4.1.2-r10","4.1.2-r11","4.1.2-r12","4.1.2-r3","4.1.2-r4","4.1.2-r5","4.1.2-r6","4.1.2-r7","4.1.2-r8","4.1.2-r9","4.1.3-r0","4.10.0-r0","4.10.0-r1","4.10.0-r2","4.10.0-r3","4.10.1-r0","4.10.1-r1","4.10.1-r2","4.11.0-r0","4.11.0-r1","4.11.1-r0","4.11.1-r1","4.12.0-r0","4.12.0-r1","4.12.0-r2","4.12.0-r3","4.12.1-r0","4.12.1-r1","4.12.1-r2","4.13.0-r0","4.13.0-r1","4.13.0-r2","4.13.0-r3","4.13.0-r4","4.13.1-r0","4.13.1-r1","4.13.1-r2","4.13.1-r3","4.13.1-r4","4.13.1-r5","4.14.0-r0","4.14.0-r1","4.14.0-r2","4.14.0-r3","4.14.1-r0","4.14.1-r1","4.14.1-r2","4.14.1-r3","4.14.1-r4","4.14.1-r5","4.15.0-r0","4.15.0-r1","4.15.0-r2","4.15.0-r3","4.15.0-r4","4.15.0-r5","4.15.1-r0","4.15.1-r1","4.15.1-r2","4.15.1-r3","4.16.0-r0","4.16.0-r1","4.16.1-r0","4.16.1-r1","4.16.1-r2","4.16.1-r3","4.16.1-r4","4.16.1-r5","4.16.1-r6","4.16.1-r7","4.16.2-r0","4.16.2-r1","4.16.2-r2","4.16.2-r3","4.17.0-r0","4.17.0-r1","4.17.0-r2","4.17.0-r3","4.17.0-r4","4.17.0-r5","4.17.1-r0","4.17.1-r1","4.17.1-r2","4.17.1-r3","4.17.1-r4","4.17.1-r5","4.17.2-r0","4.17.2-r1","4.17.2-r2","4.2.0-r0","4.2.0-r1","4.2.0-r2","4.2.0-r3","4.2.0-r4","4.2.0-r5","4.2.0-r6","4.2.0-r7","4.2.1-r0","4.2.1-r1","4.2.1-r10","4.2.1-r11","4.2.1-r2","4.2.1-r3","4.2.1-r4","4.2.1-r5","4.2.1-r6","4.2.1-r7","4.2.1-r8","4.2.1-r9","4.2.2-r0","4.2.2-r10","4.2.2-r11","4.2.2-r2","4.2.2-r3","4.2.2-r4","4.2.2-r5","4.2.2-r6","4.2.2-r7","4.2.2-r8","4.2.2-r9","4.3.0-r0","4.3.0-r1","4.3.0-r2","4.3.0-r3","4.3.0-r4","4.3.0-r5","4.3.0-r6","4.3.0-r7","4.3.0-r8","4.3.1-r0","4.3.1-r1","4.3.1-r2","4.3.1-r3","4.3.2-r0","4.3.2-r1","4.3.2-r2","4.3.2-r3","4.3.2-r4","4.3.3-r0","4.4.1-r0","4.4.1-r1","4.4.1-r2","4.4.1-r3","4.4.1-r4","4.4.1-r5","4.4.1-r6","4.4.1-r7","4.4.1-r8","4.4.2-r0","4.4.2-r1","4.5.0-r0","4.5.0-r1","4.5.1-r0","4.5.1-r1","4.5.1-r2","4.5.1-r3","4.6.0-r0","4.6.0-r1","4.6.0-r2","4.6.0-r3","4.6.0-r4","4.6.0-r5","4.6.1-r0","4.6.1-r1","4.6.1-r2","4.6.3-r0","4.6.3-r1","4.7.0-r0","4.7.0-r1","4.7.0-r2","4.7.0-r3","4.7.0-r4","4.7.0-r5","4.7.1-r0","4.7.1-r1","4.7.1-r2","4.7.1-r3","4.7.1-r4","4.7.1-r5","4.7.2-r0","4.8.1-r0","4.8.1-r1","4.8.1-r2","4.8.1-r3","4.8.1-r4","4.9.0-r0","4.9.0-r1","4.9.0-r2","4.9.0-r3","4.9.0-r4","4.9.0-r5","4.9.0-r6","4.9.0-r7","4.9.0-r8","4.9.1-r0","4.9.1-r1","4.9.1-r2","4.9.1-r3"],"ecosystem_specific":{},"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2023-34325.json"}}],"schema_version":"1.7.3","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}