Cyber Resilience

CVE-2023-34328

Xen 4.5.0 – 4.14.0

Published
05 January 2024
Modified
04 November 2025
Patch / advisory
View advisory
CVSS Score v3.1 5.5
Click a component to see what it means
Raw vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Score 0.0026 17th percentile
Risk Priority 42 floored blend · peak EPSS

Summary

CVE-2023-34328 is a medium-severity an unspecified weakness vulnerability in Xen Xen. Its CVSS base score is 5.5 (Medium).

Operationally, ranked at the 17th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] AMD CPUs since ~2014 have extensions to normal x86 debugging functionality. Xen supports guests using these extensions. Unfortunately there are errors in Xen's…

more

handling of the guest state, leading to denials of service. 1) CVE-2023-34327 - An HVM vCPU can end up operating in the context of a previous vCPUs debug mask state. 2) CVE-2023-34328 - A PV vCPU can place a breakpoint over the live GDT. This allows the PV vCPU to exploit XSA-156 / CVE-2015-8104 and lock up the CPU entirely.

CWE(s)
NVD-CWE-noinfo

Related Threats

CVEs Like This One

CVE-2024-45818Same product: Xen Xen
CVE-2023-46837Same product: Xen Xen
CVE-2024-45819Same product: Xen Xen
CVE-2025-58143Same product: Xen Xen
CVE-2023-34323Same product: Xen Xen
CVE-2023-34322Same product: Xen Xen
CVE-2025-58144Same product: Xen Xen
CVE-2024-31143Same product: Xen Xen
CVE-2025-58149Same product: Xen Xen
CVE-2024-31146Same product: Xen Xen

Affected Assets

xen
xen
4.5.0 — 4.14.0

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References