CVE-2010-3699: Citrix Xen

Low severity, CVSS 2.7. EPSS: 0.7% chance of exploitation in the next 30 days.

The backend driver in Xen 3.x allows guest OS users to cause a denial of service via a kernel thread leak, which prevents the device and guest OS from being shut down or create a zombie domain, causes a hang in zenwatch, or prevents unspecified xm commands from working properly, related to (1) netback, (2) blkback, or (3) blktap.

Affected products

• Citrix Xen: version 3.0.2 only; version 3.0.3 only; version 3.0.4 only; version 3.1.3 only; version 3.1.4 only; version 3.2.0 only; …

Published 2010-12-08. Last modified 2026-06-16.