Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2015-2752HistoryApr 01, 2015 - 2:59 p.m.
CVE-2015-2752
2015-04-0114:59:00
Debian Security Bug Tracker
security-tracker.debian.org
12
4.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
0.001 Low
EPSS
Percentile
28.7%
The XEN_DOMCTL_memory_mapping hypercall in Xen 3.2.x through 4.5.x, when using a PCI passthrough device, is not preemptible, which allows local x86 HVM domain users to cause a denial of service (host CPU consumption) via a crafted request to the device model (qemu-dm).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | xen | < 4.4.1-9 | xen_4.4.1-9_all.deb |
| Debian | 11 | all | xen | < 4.4.1-9 | xen_4.4.1-9_all.deb |
| Debian | 10 | all | xen | < 4.4.1-9 | xen_4.4.1-9_all.deb |
| Debian | 999 | all | xen | < 4.4.1-9 | xen_4.4.1-9_all.deb |
| Debian | 13 | all | xen | < 4.4.1-9 | xen_4.4.1-9_all.deb |
Related
prion
prion
Cross site request forgery (csrf)
2015-04-01 14:59:00
xen
xen
Long latency MMIO mapping operations are not preemptible
2015-03-31 12:00:00
cve
cve
CVE-2015-2752
2015-04-01 14:59:00
nessus
nessus
freebsd
freebsd
ubuntucve
ubuntucve
CVE-2015-2752
2015-04-01 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: xen-4.5.0-7.fc22
2015-04-21 18:51:14
[SECURITY] Fedora 21 Update: xen-4.4.2-2.fc21
2015-04-11 09:04:58
[SECURITY] Fedora 21 Update: xen-4.4.2-3.fc21
2015-05-02 18:04:27
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2015:0701-1)
2021-04-19 00:00:00
Fedora Update for xen FEDORA-2015-5295
2015-07-07 00:00:00
SUSE: Security Advisory (SUSE-SU-2015:0923-1)
2021-04-19 00:00:00
suse
suse
Security update for xen (important)
2015-05-21 09:04:52
Security update for xen (important)
2015-04-20 16:04:56
Security update for xen (important)
2015-06-22 12:04:52
kaspersky
kaspersky
KLA10527 Multiple vulnerabilities in different versions of Xen
2015-04-01 00:00:00
debian
debian
[SECURITY] [DLA 479-1] xen security update
2016-05-17 23:13:35
osv
osv
xen - security update
2016-05-17 00:00:00
gentoo
gentoo
Xen: Multiple vulnerabilities
2015-04-11 00:00:00
mageia
mageia
Updated xen packages fix security vulnerabilities
2016-03-07 14:20:30
4.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
0.001 Low
EPSS
Percentile
28.7%
Related for DEBIANCVE:CVE-2015-2752