PT-2015-5630 · Linux+4 · Linux Kernel+4

Jan Beulich · Published 2015-03-12 · Updated 2019-08-13 · CVE-2015-2150

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Xen versions 3.3.x through 4.5.x Linux kernel versions prior to 3.19.1

Description The issue is related to improper restriction of access to PCI command registers. This might allow local guest OS users to cause a denial of service, resulting in a non-maskable interrupt and host crash. The denial of service can be triggered by disabling the memory or I/O decoding for a PCI Express device and then accessing the device, which leads to an Unsupported Request (UR) response.

Recommendations For Xen versions 3.3.x through 4.5.x, update to a version that properly restricts access to PCI command registers. For Linux kernel versions prior to 3.19.1, update to version 3.19.1 or later to resolve the issue.

Exploit

Fix

DoS

Weakness Enumeration

CWE-264

Related Identifiers

ALT-PU-2015-1291

ALT-PU-2015-1849

CVE-2015-2150

DSA-3237-1

DSA-4497-1

MGASA-2015-0171

MGASA-2015-0172

MGASA-2015-0219

MGASA-2016-0098

OPENSUSE-SU-2015_0713-1

OPENSUSE-SU-2016_0301-1

SUSE-RU-2015:0621-1

SUSE-SU-2015:0581-1

SUSE-SU-2015:0658-1

SUSE-SU-2015:0736-1

SUSE-SU-2015:1174-1

SUSE-SU-2015:1376-1

SUSE-SU-2015:1478-1

SUSE-SU-2015:1592-1

SUSE-SU-2015:1611-1

SUSE-SU-2015:1678-1

USN-2589-1

USN-2590-1

USN-2613-1

USN-2614-1

USN-2631-1

USN-2632-1

Affected Products

Alt Linux

Linux Kernel

Suse

Ubuntu

Xen

References · 316

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/overlayfs_priv_esc.rb · Exploit
• 🔥 https://github.com/fi01/CVE-2015-3636 · Exploit
• 🔥 https://github.com/android-rooting-tools/libpingpong_exploit · Exploit
• 🔥 https://github.com/bitdefender/swapgs-attack-poc · Exploit
• 🔥 https://github.com/nardholio/cve-2016-0728 · Exploit
• 🔥 https://github.com/a7vinx/CVE-2015-3636 · Exploit
• 🔥 https://github.com/butterflyhack/CVE-2019-10207 · Exploit
• 🔥 https://github.com/askk/libping_unhash_exploit_POC · Exploit
• 🔥 https://github.com/Kagami/docker_cve-2015-2925 · Exploit
• 🔥 https://github.com/hhj4ck/CVE-2016-2067 · Exploit
• 🔥 https://github.com/bittorrent3389/cve-2016-0728 · Exploit
• 🔥 https://github.com/elit3pwner/CVE-2015-1328-GoldenEye · Exploit
• 🔥 https://github.com/0x1ns4n3/CVE-2015-1328-GoldenEye · Exploit
• 🔥 https://github.com/x1ns4n3/CVE-2015-1328-GoldenEye · Exploit
• 🔥 https://github.com/betalphafai/CVE-2015-0568 · Exploit