CVE-2023-46840

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-46840

4.1 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.5 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

I

ncorrect placement of a preprocessor directive in source code results in logic that doesn't operate as intended when support for HVM guests is compiled out of Xen.

References
Link Resource
https://xenbits.xenproject.org/xsa/advisory-450.html Patch Vendor Advisory
http://xenbits.xen.org/xsa/advisory-450.html Patch Vendor Advisory
https://lists.fedoraproject.org/archives/list/[email protected]/message/XLL6SQ6IKFYXLYWITYZCRV5IBRK5G35R/ Mailing List Third Party Advisory
https://xenbits.xenproject.org/xsa/advisory-450.html Patch Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:o:xen:xen:*:*:*:*:*:*:x86:*

Configuration 2 (hide)

cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
History

13 Jan 2026, 14:50

Type Values Removed Values Added
CPE cpe:2.3:o:xen:xen:*:*:*:*:*:*:x86:*
cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
References () https://xenbits.xenproject.org/xsa/advisory-450.html - () https://xenbits.xenproject.org/xsa/advisory-450.html - Patch, Vendor Advisory
References () http://xenbits.xen.org/xsa/advisory-450.html - () http://xenbits.xen.org/xsa/advisory-450.html - Patch, Vendor Advisory
References () https://lists.fedoraproject.org/archives/list/[email protected]/message/XLL6SQ6IKFYXLYWITYZCRV5IBRK5G35R/ - () https://lists.fedoraproject.org/archives/list/[email protected]/message/XLL6SQ6IKFYXLYWITYZCRV5IBRK5G35R/ - Mailing List, Third Party Advisory
First Time Xen
Fedoraproject fedora
Xen xen
Fedoraproject
CWE CWE-670

04 Nov 2025, 19:16

Type Values Removed Values Added
References
  • () http://xenbits.xen.org/xsa/advisory-450.html -
  • () https://lists.fedoraproject.org/archives/list/[email protected]/message/XLL6SQ6IKFYXLYWITYZCRV5IBRK5G35R/ -

21 Nov 2024, 08:29

Type Values Removed Values Added
References () https://xenbits.xenproject.org/xsa/advisory-450.html - () https://xenbits.xenproject.org/xsa/advisory-450.html -

04 Nov 2024, 22:35

Type Values Removed Values Added
Summary
  • (es) La ubicación incorrecta de una directiva de preprocesador en el código fuente da como resultado una lógica que no funciona como se espera cuando el soporte para invitados HVM se compila desde Xen.
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 4.1
Information

Published : 2024-03-20 11:15

Updated : 2026-01-13 14:50

NVD link : CVE-2023-46840

Mitre link : CVE-2023-46840

CVE.ORG link : CVE-2023-46840

JSON object : View

Products Affected

fedoraproject

xen

CWE
CWE-670

Always-Incorrect Control Flow Implementation