Xen 4.3.x, 4.4.x, and 4.5.x, when using toolstack disaggregation, allows remote domains with partial management control to cause a denial of service (host lock) via unspecified domctl operations.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Xen | Xen | 4.3.0 (including) | 4.3.0 (including) |
| Xen | Xen | 4.3.1 (including) | 4.3.1 (including) |
| Xen | Xen | 4.3.2 (including) | 4.3.2 (including) |
| Xen | Xen | 4.4.0 (including) | 4.4.0 (including) |
| Xen | Xen | 4.4.0-rc1 (including) | 4.4.0-rc1 (including) |
| Xen | Xen | 4.4.1 (including) | 4.4.1 (including) |
| Xen | Xen | 4.5.0 (including) | 4.5.0 (including) |
| Xen | Ubuntu | devel | * |
| Xen | Ubuntu | trusty | * |
| Xen | Ubuntu | utopic | * |
| Xen | Ubuntu | vivid | * |
| Xen-3.3 | Ubuntu | upstream | * |
References
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154574.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154579.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155198.html
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00018.html
- http://www.securityfocus.com/bid/73443
- http://www.securitytracker.com/id/1031997
- http://xenbits.xen.org/xsa/advisory-127.html
- https://security.gentoo.org/glsa/201504-04
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154574.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154579.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155198.html
- http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00018.html
- http://www.securityfocus.com/bid/73443
- http://www.securitytracker.com/id/1031997
- http://xenbits.xen.org/xsa/advisory-127.html
- https://security.gentoo.org/glsa/201504-04