CVE Vulnerabilities

CVE-2015-4164

Published: Jun 15, 2015 | Modified: Oct 30, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.9 MEDIUM
AV:L/AC:L/Au:N/C:N/I:N/A:C
RedHat/V2
RedHat/V3
Ubuntu

The compat_iret function in Xen 3.1 through 4.5 iterates the wrong way through a loop, which allows local 32-bit PV guest administrators to cause a denial of service (large loop and system hang) via a hypercall_iret call with EFLAGS.VM set.

Affected Software

Name Vendor Start Version End Version
Xen Xen 3.2.0 3.2.0
Xen Xen 4.1.5 4.1.5
Xen Xen 3.2.1 3.2.1
Xen Xen 4.2.2 4.2.2
Xen Xen 4.2.3 4.2.3
Xen Xen 3.4.0 3.4.0
Xen Xen 4.3.0 4.3.0
Xen Xen 4.0.4 4.0.4
Xen Xen 4.0.2 4.0.2
Xen Xen 3.3.2 3.3.2
Xen Xen 4.1.2 4.1.2
Xen Xen 3.2.2 3.2.2
Xen Xen 3.4.4 3.4.4
Xen Xen 4.0.0 4.0.0
Xen Xen 4.4.0 4.4.0
Xen Xen 4.1.1 4.1.1
Xen Xen 4.2.0 4.2.0
Xen Xen 4.1.0 4.1.0
Xen Xen 3.4.3 3.4.3
Xen Xen 4.4.1 4.4.1
Xen Xen 4.1.3 4.1.3
Xen Xen 3.2.3 3.2.3
Xen Xen 4.1.6.1 4.1.6.1
Xen Xen 4.3.4 4.3.4
Xen Xen 3.3.1 3.3.1
Xen Xen 3.4.2 3.4.2
Xen Xen 4.1.4 4.1.4
Xen Xen 3.4.1 3.4.1
Xen Xen 3.1.4 3.1.4
Xen Xen 4.3.1 4.3.1
Xen Xen 3.3.0 3.3.0
Xen Xen 4.2.1 4.2.1
Xen Xen 4.5.0 4.5.0
Xen Xen 3.1.3 3.1.3
Xen Xen 4.4.0 4.4.0
Xen Xen 4.0.1 4.0.1
Xen Xen 4.0.3 4.0.3

References