CVE-2015-8340

2015-12-1719:59:00

CWE-17

[email protected]

web.nvd.nist.gov

cve-2015-8340

xen

memory_exchange

denial of service

deadlock

host crash

nvd

8.1 High

AI Score

Confidence

High

4.7 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

25.6%

JSON

The memory_exchange function in common/memory.c in Xen 3.2.x through 4.6.x does not properly release locks, which might allow guest OS administrators to cause a denial of service (deadlock or host crash) via unspecified vectors, related to XENMEM_exchange error handling.

CPENameOperatorVersion
xen:xenxeneq3.2.0
xen:xenxeneq4.3.2
xen:xenxeneq4.6.0
xen:xenxeneq4.1.5
xen:xenxeneq3.2.1
xen:xenxeneq4.2.2
xen:xenxeneq4.2.3
xen:xenxeneq4.3.3
xen:xenxeneq3.4.0
xen:xenxeneq4.3.0

CPE	Name	Operator	Version
xen:xen	xen	eq	3.2.0
xen:xen	xen	eq	4.3.2
xen:xen	xen	eq	4.6.0
xen:xen	xen	eq	4.1.5
xen:xen	xen	eq	3.2.1
xen:xen	xen	eq	4.2.2
xen:xen	xen	eq	4.2.3
xen:xen	xen	eq	4.3.3
xen:xen	xen	eq	3.4.0
xen:xen	xen	eq	4.3.0