CVE-2015-8341

2015-12-1719:59:00

CWE-399

[email protected]

web.nvd.nist.gov

cve-2015-8341

xen

libxl toolstack library

denial of service

memory consumption

disk consumption

nvd

8.4 High

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.004 Low

EPSS

Percentile

72.8%

JSON

The libxl toolstack library in Xen 4.1.x through 4.6.x does not properly release mappings of files used as kernels and initial ramdisks when managing multiple domains in the same process, which allows attackers to cause a denial of service (memory and disk consumption) by starting domains.

CPENameOperatorVersion
xen:xenxeneq4.3.2
xen:xenxeneq4.6.0
xen:xenxeneq4.1.5
xen:xenxeneq4.2.2
xen:xenxeneq4.2.3
xen:xenxeneq4.3.3
xen:xenxeneq4.3.0
xen:xenxeneq4.1.2
xen:xenxeneq4.5.2
xen:xenxeneq4.4.2

CPE	Name	Operator	Version
xen:xen	xen	eq	4.3.2
xen:xen	xen	eq	4.6.0
xen:xen	xen	eq	4.1.5
xen:xen	xen	eq	4.2.2
xen:xen	xen	eq	4.2.3
xen:xen	xen	eq	4.3.3
xen:xen	xen	eq	4.3.0
xen:xen	xen	eq	4.1.2
xen:xen	xen	eq	4.5.2
xen:xen	xen	eq	4.4.2