CVE-2007-3919: Xensource Inc Xen

Medium severity, CVSS 6.0. EPSS: 0.3% chance of exploitation in the next 30 days.

(1) xenbaked and (2) xenmon.py in Xen 3.1 and earlier allow local users to truncate arbitrary files via a symlink attack on /tmp/xenq-shm.

Affected products

• Xensource Inc Xen: version 3.0.3_0_1 only; version 3.0.3_0_3 only

Published 2007-10-28. Last modified 2026-06-16.