Lucene search

K
ubuntucveUbuntu.comUB:CVE-2015-7311
HistoryOct 01, 2015 - 12:00 a.m.

CVE-2015-7311

2015-10-0100:00:00
ubuntu.com
ubuntu.com
12

3.6 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:P/A:P

0.001 Low

EPSS

Percentile

28.6%

libxl in Xen 4.1.x through 4.6.x does not properly handle the readonly flag
on disks when using the qemu-xen device model, which allows local guest
users to write to a read-only disk image.

Notes

Author Note
seth-arnold The patch may break deployed environments but those environments are currently not safe
OSVersionArchitecturePackageVersionFilename
ubuntu14.04noarchxen< 4.4.2-0ubuntu0.14.04.3UNKNOWN
ubuntu15.04noarchxen< 4.5.0-1ubuntu4.3UNKNOWN
ubuntu15.10noarchxen< 4.5.1-0ubuntu1.1UNKNOWN

3.6 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:P/A:P

0.001 Low

EPSS

Percentile

28.6%