CVE-2009-4011: Dtc-Xen Project Dtc-Xen

High severity, CVSS 8.1. EPSS: 1% chance of exploitation in the next 30 days.

dtc-xen 0.5.x before 0.5.4 suffers from a race condition where an attacker could potentially get a bash access as xenXX user on the dom0, and then access a potentially reuse an already opened VPS console.

Affected products

• Dtc-Xen Project Dtc-Xen: from 0.5.0, before 0.5.4 (fixed in 0.5.4)

Published 2019-11-09. Last modified 2026-06-16.