PT-2015-5630 · Linux+4 · Linux Kernel+4
Jan Beulich
·
Publicado
2015-03-12
·
Atualizado
2019-08-13
·
CVE-2015-2150
CVSS v2.0
4.9
Média
| Vetor | AV:L/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Xen versions 3.3.x through 4.5.x
Linux kernel versions prior to 3.19.1
Description
The issue is related to improper restriction of access to PCI command registers. This might allow local guest OS users to cause a denial of service, resulting in a non-maskable interrupt and host crash. The denial of service can be triggered by disabling the memory or I/O decoding for a PCI Express device and then accessing the device, which leads to an Unsupported Request (UR) response.
Recommendations
For Xen versions 3.3.x through 4.5.x, update to a version that properly restricts access to PCI command registers.
For Linux kernel versions prior to 3.19.1, update to version 3.19.1 or later to resolve the issue.
Exploit
Correção
DoS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Linux Kernel
Suse
Ubuntu
Xen