Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2015-4164HistoryJun 15, 2015 - 3:59 p.m.
CVE-2015-4164
2015-06-1515:59:00
Debian Security Bug Tracker
security-tracker.debian.org
10
4.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
0.001 Low
EPSS
Percentile
25.9%
The compat_iret function in Xen 3.1 through 4.5 iterates the wrong way through a loop, which allows local 32-bit PV guest administrators to cause a denial of service (large loop and system hang) via a hypercall_iret call with EFLAGS.VM set.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | xen | < 4.6.0-1 | xen_4.6.0-1_all.deb |
| Debian | 11 | all | xen | < 4.6.0-1 | xen_4.6.0-1_all.deb |
| Debian | 10 | all | xen | < 4.6.0-1 | xen_4.6.0-1_all.deb |
| Debian | 999 | all | xen | < 4.6.0-1 | xen_4.6.0-1_all.deb |
| Debian | 13 | all | xen | < 4.6.0-1 | xen_4.6.0-1_all.deb |
Related
freebsd
freebsd
xen-kernel -- vulnerability in the iret hypercall handler
2015-06-11 00:00:00
xen
xen
vulnerability in the iret hypercall handler
2015-06-11 12:00:00
nessus
nessus
FreeBSD : xen-kernel -- vulnerability in the iret hypercall handler (8c31b288-27ec-11e5-a4a5-002590263bf5)
2015-07-14 00:00:00
SUSE SLES10 Security Update : Xen (SUSE-SU-2015:1206-1)
2015-07-09 00:00:00
Fedora 21 : xen-4.4.2-6.fc21 (2015-9978)
2015-06-25 00:00:00
prion
prion
Code injection
2015-06-15 15:59:00
ubuntucve
ubuntucve
CVE-2015-4164
2015-06-15 00:00:00
cve
cve
CVE-2015-4164
2015-06-15 15:59:00
suse
suse
Security update for Xen (important)
2015-07-08 17:08:09
Security update for Xen (important)
2015-09-25 21:10:23
Security update for Xen (important)
2015-06-29 14:05:20
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2015:1206-1)
2021-06-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2015:1643-1)
2021-06-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2015:1479-1)
2021-06-09 00:00:00
osv
osv
xen - security update
2015-06-13 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 3286-1] xen security update
2015-06-21 00:00:00
libvirt / qemu / Xen multiple security vulnerabilities
2015-06-21 00:00:00
debian
debian
[SECURITY] [DSA 3286-1] xen security update
2015-06-13 14:13:09
fedora
fedora
[SECURITY] Fedora 22 Update: xen-4.5.0-11.fc22
2015-06-24 16:01:05
[SECURITY] Fedora 22 Update: xen-4.5.1-2.fc22
2015-07-19 01:58:20
[SECURITY] Fedora 22 Update: xen-4.5.1-5.fc22
2015-08-12 06:57:38
mageia
mageia
Updated xen packages fix security vulnerabilities
2016-03-07 14:20:30
gentoo
gentoo
Xen: Multiple vulnerabilities
2016-04-05 00:00:00
4.9 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
0.001 Low
EPSS
Percentile
25.9%
Related for DEBIANCVE:CVE-2015-4164