PT-2015-5868 · Xen+1 · Xen+1

Konrad Rzeszutek Wilk · Publicado 2015-04-01 · Atualizado 2018-10-30 · CVE-2015-2752

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Xen versions 3.2.x through 4.5.x

Description The issue concerns the XEN DOMCTL memory mapping hypercall in Xen, which is not preemptible when using a PCI passthrough device. This could allow local users of the x86 HVM domain to cause a denial of service, specifically host CPU consumption, by making a crafted request to the device model (qemu-dm).

Recommendations For Xen versions 3.2.x through 4.5.x, consider disabling the PCI passthrough device as a temporary workaround to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2015-2752

DLA-479-1

MGASA-2016-0098

OPENSUSE-SU-2015_0732-1

OPENSUSE-SU-2015_1092-1

SUSE-SU-2015:0701-1

SUSE-SU-2015:0923-1

Produtos afetados

Suse

Xen

Referências · 135

• 🔥 https://github.com/vincentbernat/cve-2015-3456 · Exploit
• https://bugzilla.suse.com/912011 · Nota
• http://xenbits.xen.org/xsa/advisory-118.html · Nota
• https://bugzilla.suse.com/921842 · Nota
• http://xenbits.xen.org/xsa/advisory-164.html · Nota
• https://osv.dev/vulnerability/MGASA-2016-0098 · Aviso do Fabricante
• http://xenbits.xen.org/xsa/advisory-120.html · Nota
• https://suse.com/security/cve/CVE-2015-4164.html · Nota
• https://suse.com/security/cve/CVE-2015-2751.html · Nota
• https://security.gentoo.org/glsa/201504-04 · Aviso do Fabricante
• https://bugzilla.suse.com/903680 · Nota
• https://suse.com/support/update/announcement/2015/suse-su-20150923-1 · Nota
• http://xenbits.xen.org/xsa/advisory-124.html · Nota
• http://xenbits.xen.org/xsa/advisory-146.html · Nota
• https://advisories.mageia.org/MGASA-2016-0098.html · Nota de Segurança