PT-2016-3926 · Xen+1 · Xen+1

Jan Beulich · Publicado 2016-01-14 · Atualizado 2024-06-15 · CVE-2015-8554

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Xen versions 4.6.x and earlier

Description A buffer overflow issue exists in the hw/pt-msi.c file of Xen, specifically when using the qemu-xen-traditional device model. This issue can be exploited by local x86 HVM guest administrators to gain privileges on a system with access to a passed-through MSI-X capable physical PCI device and MSI-X table entries. The exploitation is related to a "write path".

Recommendations For Xen versions 4.6.x and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2015-8554

DLA-479-1

OPENSUSE-SU-2016_0123-1

OPENSUSE-SU-2016_0124-1

OPENSUSE-SU-2016_0126-1

OPENSUSE-SU-2024:10196-1

SUSE-SU-2016:0873-1

SUSE-SU-2016:0955-1

SUSE-SU-2016:1154-1

SUSE-SU-2016:1318-1

SUSE-SU-2016:1745-1

Produtos afetados

Suse

Xen

Referências · 274

• https://bugzilla.suse.com/956411 · Nota
• https://bugzilla.suse.com/864805 · Nota
• https://suse.com/security/cve/CVE-2015-7504.html · Nota
• https://suse.com/security/cve/CVE-2015-8554.html · Nota
• https://suse.com/security/cve/CVE-2016-7094 · Nota
• https://suse.com/security/cve/CVE-2012-5515 · Nota
• https://suse.com/security/cve/CVE-2015-7972 · Nota
• https://suse.com/security/cve/CVE-2015-7549.html · Nota
• https://suse.com/security/cve/CVE-2015-8104.html · Nota
• https://bugzilla.suse.com/969126 · Nota
• https://suse.com/security/cve/CVE-2015-8555.html · Nota
• https://bugzilla.suse.com/965315 · Nota
• https://suse.com/security/cve/CVE-2015-8555 · Nota
• https://bugzilla.suse.com/945989 · Nota
• https://suse.com/security/cve/CVE-2012-4538 · Nota