PT-2015-7684 · Xen+1 · Xen+1

Jan Beulich · Published 2015-10-29 · Updated 2024-06-15 · CVE-2015-7971

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Xen versions 3.2.x through 4.6.x

Description The issue allows local guests to cause a denial of service via a sequence of crafted hypercalls, specifically HYPERCALL xenoprof op or HYPERVISOR xenpmu op, which are not properly handled in the do xenoprof op function in common/xenoprof.c or the do xenpmu op function in arch/x86/cpu/vpmu.c, respectively. This occurs because Xen does not limit the number of printk console messages when logging certain pmu and profiling hypercalls.

Recommendations For Xen versions 3.2.x through 4.6.x, consider disabling the do xenoprof op and do xenpmu op functions as a temporary workaround until a patch is available. Restrict access to the HYPERCALL xenoprof op and HYPERVISOR xenpmu op hypercalls to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-19

Related Identifiers

CVE-2015-7971

DLA-479-1

DSA-3414-1

MGASA-2016-0098

OPENSUSE-SU-2015_1964-1

OPENSUSE-SU-2015_2003-1

OPENSUSE-SU-2024:10196-1

SUSE-SU-2015:1853-1

SUSE-SU-2015:1894-1

SUSE-SU-2015:1908-1

SUSE-SU-2015:1952-1

SUSE-SU-2015:2306-1

SUSE-SU-2015:2326-1

SUSE-SU-2015:2328-1

SUSE-SU-2015:2338-1

Affected Products

Suse

Xen

References · 285

• https://osv.dev/vulnerability/openSUSE-SU-2024:10196-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7971 · Security Note
• https://advisories.mageia.org/MGASA-2016-0098.html · Security Note
• https://security-tracker.debian.org/tracker/DSA-3414-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7969 · Security Note
• http://lists.opensuse.org/opensuse-updates/2015-11/msg00063.html · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2015:2326-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2015-7971 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5307 · Security Note
• https://ubuntu.com/security/CVE-2015-7971 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7311 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7813 · Security Note
• https://bdu.fstec.ru/vul/2015-11314 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6654 · Security Note
• https://cve.org/CVERecord?id=CVE-2015-7971 · Security Note