Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2015-7835HistoryOct 30, 2015 - 3:59 p.m.
CVE-2015-7835
2015-10-3015:59:00
Debian Security Bug Tracker
security-tracker.debian.org
19
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
25.6%
The mod_l2_entry function in arch/x86/mm.c in Xen 3.4 through 4.6.x does not properly validate level 2 page table entries, which allows local PV guest administrators to gain privileges via a crafted superpage mapping.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | xen | <Â 4.6.0-1 | xen_4.6.0-1_all.deb |
| Debian | 11 | all | xen | <Â 4.6.0-1 | xen_4.6.0-1_all.deb |
| Debian | 10 | all | xen | <Â 4.6.0-1 | xen_4.6.0-1_all.deb |
| Debian | 999 | all | xen | <Â 4.6.0-1 | xen_4.6.0-1_all.deb |
| Debian | 13 | all | xen | <Â 4.6.0-1 | xen_4.6.0-1_all.deb |
Related
nessus
nessus
FreeBSD : xen-kernel -- Uncontrolled creation of large page mappings by PV guests (3d9f6260-881d-11e5-ab94-002590263bf5)
2015-11-11 00:00:00
Debian DSA-3390-1 : xen - security update
2015-11-03 00:00:00
OracleVM 2.2 : xen (OVMSA-2015-0151)
2015-12-09 00:00:00
cve
cve
CVE-2015-7835
2015-10-30 15:59:00
openvas
openvas
Debian: Security Advisory (DSA-3390-1)
2015-11-01 00:00:00
Debian Security Advisory DSA 3390-1 (xen - security update)
2015-11-02 00:00:00
Citrix XenServer Multiple Security Updates (CTX202404)
2015-11-26 00:00:00
xen
xen
x86: Uncontrolled creation of large page mappings by PV guests
2015-10-29 11:59:00
freebsd
freebsd
xen-kernel -- Uncontrolled creation of large page mappings by PV guests
2015-10-29 00:00:00
debian
debian
[SECURITY] [DSA 3390-1] xen security update
2015-11-02 18:24:14
[SECURITY] [DSA 3390-1] xen security update
2015-11-02 18:24:14
ubuntucve
ubuntucve
CVE-2015-7835
2015-10-30 00:00:00
prion
prion
Design/Logic Flaw
2015-10-30 15:59:00
suse
suse
Security update for xen (important)
2015-11-10 18:10:12
Security update for xen (important)
2015-11-04 17:13:16
Security update for xen (important)
2015-11-03 11:12:06
fedora
fedora
[SECURITY] Fedora 22 Update: xen-4.5.1-14.fc22
2015-11-10 00:25:04
[SECURITY] Fedora 23 Update: xen-4.5.1-14.fc23
2015-11-08 22:25:23
[SECURITY] Fedora 21 Update: xen-4.4.3-7.fc21
2015-11-10 00:51:54
mageia
mageia
Updated xen packages fix security vulnerabilities
2016-03-07 14:20:30
gentoo
gentoo
Xen: Multiple vulnerabilities
2016-04-05 00:00:00
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
25.6%
Related for DEBIANCVE:CVE-2015-7835