CVE-2015-4104

Xen 3.3.x through 4.5.x does not properly restrict access to PCI MSI mask bits, which allows local x86 HVM guest users to cause a denial of service (unexpected interrupt and host crash) via unspecified vectors.
References
Link Resource
http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160154.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160171.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160685.html
http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00004.html
http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00007.html
http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00029.html
http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00030.html
http://support.citrix.com/article/CTX201145
http://www.debian.org/security/2015/dsa-3284
http://www.debian.org/security/2015/dsa-3286
http://www.securityfocus.com/bid/74950
http://www.securitytracker.com/id/1032464
http://www.ubuntu.com/usn/USN-2630-1
http://xenbits.xen.org/xsa/advisory-129.html Vendor Advisory
https://security.gentoo.org/glsa/201604-03
https://support.citrix.com/article/CTX206006
http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160154.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160171.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160685.html
http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00004.html
http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00007.html
http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00029.html
http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00030.html
http://support.citrix.com/article/CTX201145
http://www.debian.org/security/2015/dsa-3284
http://www.debian.org/security/2015/dsa-3286
http://www.securityfocus.com/bid/74950
http://www.securitytracker.com/id/1032464
http://www.ubuntu.com/usn/USN-2630-1
http://xenbits.xen.org/xsa/advisory-129.html Vendor Advisory
https://security.gentoo.org/glsa/201604-03
https://support.citrix.com/article/CTX206006
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:xen:xen:3.3.0:*:*:*:*:*:*:*
cpe:2.3:o:xen:xen:3.3.1:*:*:*:*:*:*:*
cpe:2.3:o:xen:xen:3.3.2:*:*:*:*:*:*:*
cpe:2.3:o:xen:xen:3.4.0:*:*:*:*:*:*:*
cpe:2.3:o:xen:xen:3.4.1:*:*:*:*:*:*:*
cpe:2.3:o:xen:xen:3.4.2:*:*:*:*:*:*:*
cpe:2.3:o:xen:xen:3.4.3:*:*:*:*:*:*:*
cpe:2.3:o:xen:xen:3.4.4:*:*:*:*:*:*:*
cpe:2.3:o:xen:xen:4.0.0:*:*:*:*:*:*:*
cpe:2.3:o:xen:xen:4.0.1:*:*:*:*:*:*:*
cpe:2.3:o:xen:xen:4.0.2:*:*:*:*:*:*:*
cpe:2.3:o:xen:xen:4.0.3:*:*:*:*:*:*:*
cpe:2.3:o:xen:xen:4.0.4:*:*:*:*:*:*:*
cpe:2.3:o:xen:xen:4.1.0:*:*:*:*:*:*:*
cpe:2.3:o:xen:xen:4.1.1:*:*:*:*:*:*:*
cpe:2.3:o:xen:xen:4.1.2:*:*:*:*:*:*:*
cpe:2.3:o:xen:xen:4.1.3:*:*:*:*:*:*:*
cpe:2.3:o:xen:xen:4.1.4:*:*:*:*:*:*:*
cpe:2.3:o:xen:xen:4.1.5:*:*:*:*:*:*:*
cpe:2.3:o:xen:xen:4.1.6.1:*:*:*:*:*:*:*
cpe:2.3:o:xen:xen:4.2.0:*:*:*:*:*:*:*
cpe:2.3:o:xen:xen:4.2.1:*:*:*:*:*:*:*
cpe:2.3:o:xen:xen:4.2.2:*:*:*:*:*:*:*
cpe:2.3:o:xen:xen:4.2.3:*:*:*:*:*:*:*
cpe:2.3:o:xen:xen:4.3.0:*:*:*:*:*:*:*
cpe:2.3:o:xen:xen:4.3.1:*:*:*:*:*:*:*
cpe:2.3:o:xen:xen:4.3.2:*:*:*:*:*:*:*
cpe:2.3:o:xen:xen:4.3.4:*:*:*:*:*:*:*
cpe:2.3:o:xen:xen:4.4.0:*:*:*:*:*:*:*
cpe:2.3:o:xen:xen:4.4.1:-:*:*:*:*:*:*
cpe:2.3:o:xen:xen:4.5.0:*:*:*:*:*:*:*

History

21 Nov 2024, 02:30

Type Values Removed Values Added
References () http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160154.html - () http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160154.html -
References () http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160171.html - () http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160171.html -
References () http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160685.html - () http://lists.fedoraproject.org/pipermail/package-announce/2015-June/160685.html -
References () http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00004.html - () http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00004.html -
References () http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00007.html - () http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00007.html -
References () http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00029.html - () http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00029.html -
References () http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00030.html - () http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00030.html -
References () http://support.citrix.com/article/CTX201145 - () http://support.citrix.com/article/CTX201145 -
References () http://www.debian.org/security/2015/dsa-3284 - () http://www.debian.org/security/2015/dsa-3284 -
References () http://www.debian.org/security/2015/dsa-3286 - () http://www.debian.org/security/2015/dsa-3286 -
References () http://www.securityfocus.com/bid/74950 - () http://www.securityfocus.com/bid/74950 -
References () http://www.securitytracker.com/id/1032464 - () http://www.securitytracker.com/id/1032464 -
References () http://www.ubuntu.com/usn/USN-2630-1 - () http://www.ubuntu.com/usn/USN-2630-1 -
References () http://xenbits.xen.org/xsa/advisory-129.html - Vendor Advisory () http://xenbits.xen.org/xsa/advisory-129.html - Vendor Advisory
References () https://security.gentoo.org/glsa/201604-03 - () https://security.gentoo.org/glsa/201604-03 -
References () https://support.citrix.com/article/CTX206006 - () https://support.citrix.com/article/CTX206006 -

Information

Published : 2015-06-03 20:59

Updated : 2024-11-21 02:30


NVD link : CVE-2015-4104

Mitre link : CVE-2015-4104

CVE.ORG link : CVE-2015-4104


JSON object : View

Products Affected

xen

  • xen
CWE
CWE-264

Permissions, Privileges, and Access Controls