PT-2015-7682 · Xen+1 · Xen+1

Jan Beulich · Published 2015-10-29 · Updated 2024-06-15 · CVE-2015-7969

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Xen versions 4.0 through 4.6.x

Description The issue allows local guest administrators or domains with certain permissions to cause a denial of service due to memory consumption. This can be achieved through a large number of domain "teardowns" with the vcpu pointer array allocated, utilizing specific hypercalls. The affected hypercalls include (1) XEN DOMCTL max vcpus, (2) XENOPROF get buffer, and (3) XENOPROF set passive.

Recommendations For Xen versions 4.0 through 4.6.x, consider restricting the use of the XEN DOMCTL max vcpus, XENOPROF get buffer, and XENOPROF set passive hypercalls to minimize the risk of exploitation. As a temporary workaround, limit the number of domain "teardowns" to reduce the impact of memory consumption. Avoid using the vcpu pointer array allocated through these hypercalls until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2015-7969

DLA-479-1

DSA-3414-1

MGASA-2016-0098

OPENSUSE-SU-2015_1964-1

OPENSUSE-SU-2015_2003-1

OPENSUSE-SU-2024:10196-1

SUSE-SU-2015:1853-1

SUSE-SU-2015:1894-1

SUSE-SU-2015:1908-1

SUSE-SU-2015:1952-1

SUSE-SU-2015:2306-1

SUSE-SU-2015:2326-1

SUSE-SU-2015:2328-1

SUSE-SU-2015:2338-1

Affected Products

Suse

Xen

References · 285

• https://osv.dev/vulnerability/openSUSE-SU-2024:10196-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7971 · Security Note
• https://advisories.mageia.org/MGASA-2016-0098.html · Security Note
• https://security-tracker.debian.org/tracker/DSA-3414-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2015-7969 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7969 · Security Note
• http://lists.opensuse.org/opensuse-updates/2015-11/msg00063.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2015:2326-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-7969 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5307 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7311 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7813 · Security Note
• https://bdu.fstec.ru/vul/2015-11314 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6654 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8104 · Security Note