Security Resilience

CVE-2023-34327

Xen ≥ 4.5.0

Published
05 January 2024
Modified
04 November 2025
Patch / advisory
View advisory
CVSS Score v3.1 5.5
Click a component to see what it means
Raw vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Score 0.0027 18th percentile
Risk Priority 42 floored blend · peak EPSS

CVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.

Summary

CVE-2023-34327 is a medium-severity an unspecified weakness vulnerability in Xen Xen. Its CVSS base score is 5.5 (Medium).

Operationally, ranked at the 18th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] AMD CPUs since ~2014 have extensions to normal x86 debugging functionality. Xen supports guests using these extensions. Unfortunately there are errors in Xen's…

more

handling of the guest state, leading to denials of service. 1) CVE-2023-34327 - An HVM vCPU can end up operating in the context of a previous vCPUs debug mask state. 2) CVE-2023-34328 - A PV vCPU can place a breakpoint over the live GDT. This allows the PV vCPU to exploit XSA-156 / CVE-2015-8104 and lock up the CPU entirely.

CWE(s)
NVD-CWE-noinfo

Related Threats

CVEs Like This One

CVE-2025-58142Same product: Xen Xen
CVE-2023-34323Same product: Xen Xen
CVE-2025-58149Same product: Xen Xen
CVE-2023-34321Same product: Xen Xen
CVE-2024-31145Same product: Xen Xen
CVE-2025-58145Same product: Xen Xen
CVE-2025-27465Same product: Xen Xen
CVE-2026-23558Same product: Xen Xen
CVE-2026-23557Same product: Xen Xen
CVE-2023-46837Same product: Xen Xen

Affected Assets

xen
xen
≥ 4.5.0

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References