Xen 3.3.x through 4.5.x does not properly restrict write access to the host MSI message data field, which allows local x86 HVM guest administrators to cause a denial of service (host interrupt handling confusion) via vectors related to qemu and accessing spanning multiple fields.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 02:30
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160154.html - | |
| References | () http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160171.html - | |
| References | () http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160685.html - | |
| References | () http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00004.html - | |
| References | () http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00007.html - | |
| References | () http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00029.html - | |
| References | () http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00030.html - | |
| References | () http://support.citrix.com/article/CTX201145 - | |
| References | () http://www.debian.org/security/2015/dsa-3284 - | |
| References | () http://www.debian.org/security/2015/dsa-3286 - | |
| References | () http://www.securityfocus.com/bid/74947 - | |
| References | () http://www.securitytracker.com/id/1032456 - | |
| References | () http://www.ubuntu.com/usn/USN-2630-1 - | |
| References | () http://xenbits.xen.org/xsa/advisory-128.html - Vendor Advisory | |
| References | () https://security.gentoo.org/glsa/201604-03 - | |
| References | () https://support.citrix.com/article/CTX206006 - |
Information
Published : 2015-06-03 20:59
Updated : 2024-11-21 02:30
NVD link : CVE-2015-4103
Mitre link : CVE-2015-4103
CVE.ORG link : CVE-2015-4103
JSON object : View
Products Affected
xen
- xen
CWE
CWE-264
Permissions, Privileges, and Access Controls