PT-2015-7307 · Xen · Xen

Julien Grall · Published 2015-09-03 · Updated 2016-12-07 · CVE-2015-6654

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Xen versions 4.5.x, 4.4.x, and earlier

Description The issue is related to the xenmem add to physmap one function in arch/arm/mm.c, which does not limit the number of printk console messages when reporting a failure to retrieve a reference on a foreign page. This allows remote domains to cause a denial of service by leveraging permissions to map the memory of a foreign guest.

Recommendations For Xen versions 4.5.x, 4.4.x, and earlier, consider restricting permissions to map the memory of a foreign guest to minimize the risk of exploitation. As a temporary workaround, consider limiting the number of printk console messages to prevent a denial of service.

Fix

DoS

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2015-6654

DSA-3414-1

MGASA-2016-0098

Affected Products

Xen

References · 83

• https://ubuntu.com/security/CVE-2015-6654 · Vendor Advisory
• http://debian.org/security/2015/dsa-3414 · Vendor Advisory
• http://xenbits.xen.org/xsa/advisory-141.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3259 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7970 · Security Note
• https://osv.dev/vulnerability/MGASA-2016-0098 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2015-6654 · Security Note
• https://bdu.fstec.ru/vul/2015-12106 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7971 · Security Note
• https://advisories.mageia.org/MGASA-2016-0098.html · Security Note
• https://security-tracker.debian.org/tracker/DSA-3414-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2015-6654 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7814 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-6654 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-11538 · Security Note