PT-2016-3926 · Xen+1 · Xen+1

Jan Beulich · Published 2016-01-14 · Updated 2024-06-15 · CVE-2015-8554

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Xen versions 4.6.x and earlier

Description A buffer overflow issue exists in the hw/pt-msi.c file of Xen, specifically when using the qemu-xen-traditional device model. This issue can be exploited by local x86 HVM guest administrators to gain privileges on a system with access to a passed-through MSI-X capable physical PCI device and MSI-X table entries. The exploitation is related to a "write path".

Recommendations For Xen versions 4.6.x and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2015-8554

DLA-479-1

OPENSUSE-SU-2016_0123-1

OPENSUSE-SU-2016_0124-1

OPENSUSE-SU-2016_0126-1

OPENSUSE-SU-2024:10196-1

SUSE-SU-2016:0873-1

SUSE-SU-2016:0955-1

SUSE-SU-2016:1154-1

SUSE-SU-2016:1318-1

SUSE-SU-2016:1745-1

Affected Products

Suse

Xen

References · 274

• https://osv.dev/vulnerability/SUSE-SU-2016:1154-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:0955-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-8554 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2015-8554 · Vendor Advisory
• http://xenbits.xen.org/xsa/advisory-164.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10196-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2016-00004 · Security Note
• https://osv.dev/vulnerability/CVE-2015-8554 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:0873-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:1318-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2016:1745-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-11538 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2015-8554 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2015-8554 · Security Note
• https://bdu.fstec.ru/vul/2015-12106 · Security Note