Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
4.9
CVSSv2

CVE-2015-7970

Published: 30/10/2015 Updated: 01/07/2017
CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9
VMScore: 436
Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C
Subscribe to Xen

Vulnerability Summary

The p2m_pod_emergency_sweep function in arch/x86/mm/p2m-pod.c in Xen 3.4.x, 3.5.x, and 3.6.x is not preemptible, which allows local x86 HVM guest administrators to cause a denial of service (CPU consumption and possibly reboot) via crafted memory contents that triggers a "time-consuming linear scan," related to Populate-on-Demand.

Vulnerable Product Search on Vulmon Subscribe to Product

xen xen 3.4.1

xen xen 3.4.2

xen xen 3.4.3

xen xen 3.4.4

xen xen 3.4.0

Vendor Advisories

Debian Security Advisories: DSA-3414-1 xen -- security update
Multiple security issues have been found in the Xen virtualisation solution, which may result in denial of service or information disclosure For the oldstable distribution (wheezy), an update will be provided later For the stable distribution (jessie), these problems have been fixed in version 441-9+deb8u3 For the unstable distribution (sid), ...
Red Hat: CVE-2015-7970
The p2m_pod_emergency_sweep function in arch/x86/mm/p2m-podc in Xen 34x, 35x, and 36x is not preemptible, which allows local x86 HVM guest administrators to cause a denial of service (CPU consumption and possibly reboot) via crafted memory contents that triggers a "time-consuming linear scan," related to Populate-on-Demand ...

References

CWE-399http://xenbits.xen.org/xsa/advisory-150.htmlhttp://www.securityfocus.com/bid/77362http://support.citrix.com/article/CTX202404http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171249.htmlhttp://www.securitytracker.com/id/1034034http://www.debian.org/security/2015/dsa-3414http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171185.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2015-November/171082.htmlhttp://lists.opensuse.org/opensuse-updates/2015-12/msg00053.htmlhttps://security.gentoo.org/glsa/201604-03https://nvd.nist.govhttps://www.debian.org/security/./dsa-3414https://access.redhat.com/security/cve/cve-2015-7970
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4644unprivilegedCVE-2024-3494CVE-2024-22460CVE-2024-26026CVE-2024-23473firewallCVE-2024-28889XML external entity
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook