Published: 15/06/2015 Updated: 30/10/2018

CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9

VMScore: 436

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C

GNTTABOP_swap_grant_ref in Xen 4.2 up to and including 4.5 does not check the grant table operation version, which allows local guest domains to cause a denial of service (NULL pointer dereference) via a hypercall without a GNTTABOP_setup_table or GNTTABOP_set_version.

Vulnerable Product	Search on Vulmon	Subscribe to Product
xen xen 4.3.0
xen xen 4.3.1
xen xen 4.2.0
xen xen 4.2.1
xen xen 4.4.0
xen xen 4.4.1
xen xen 4.3.4
xen xen 4.2.2
xen xen 4.2.3
xen xen 4.5.0

Debian Bug report logs - #795721 CVE-2015-3259 CVE-2015-3340 CVE-2015-4163 CVE-2015-4164 Package: src:xen; Maintainer for src:xen is Debian Xen Team <pkg-xen-devel@listsaliothdebianorg>; Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Sun, 16 Aug 2015 12:45:02 UTC Severity: important Tags: security Fixed i ...

Multiple security issues have been found in the Xen virtualisation solution: CVE-2015-3209 Matt Tait discovered a flaw in the way QEMU's AMD PCnet Ethernet emulation handles multi-TMD packets with a length above 4096 bytes A privileged guest user in a guest with an AMD PCNet ethernet card enabled can potentially use this flaw to e ...

GNTTABOP_swap_grant_ref in Xen 42 through 45 does not check the grant table operation version, which allows local guest domains to cause a denial of service (NULL pointer dereference) via a hypercall without a GNTTABOP_setup_table or GNTTABOP_set_version ...

NVD-CWE-Other http://xenbits.xen.org/xsa/advisory-134.html http://www.securityfocus.com/bid/75141 http://support.citrix.com/article/CTX201145 http://www.securitytracker.com/id/1032568 http://www.debian.org/security/2015/dsa-3286 http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00030.html http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00007.html http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00004.html https://security.gentoo.org/glsa/201604-03 https://support.citrix.com/article/CTX206006 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=795721 https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2015-4163 https://www.debian.org/security/./dsa-3286

CVE-2015-4163

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect