CVE-2015-5307

Advisory lineage Upstream: 0 Downstream: 36
Modified
Published: 16 Nov 2015, 11:00
Last modified:06 Aug 2024, 06:41

Vulnerability Summary

Overall Risk (default)
low
20/100
CVSS Score
4.9 MEDIUM
v2.0 (nvd)
EPSS Score
0.1% LOW
0% probability -0.07%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

16 Nov 2015, 11:00
Published
Vulnerability first disclosed
06 Aug 2024, 06:41
Last Modified
Vulnerability information updated

Description

The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic or hang) by triggering many #AC (aka Alignment Check) exceptions, related to svm.c and vmx.c.

CVSS Metrics

  • v2.0•MEDIUM•Score: 4.9AV:L/AC:L/Au:N/C:N/I:N/A:C

EPSS Trends

Current EPSS score: 0.10%• Percentile: 26%

Techniques & Countermeasures

  • CWE-399•Resource Management Errors

    Weaknesses in this category are related to improper management of system resources.

Affected Systems

  • canonical•ubuntu_linux

    12.04 | 14.04 | 15.10

  • debian•debian_linux

    7.0 | 8.0

  • linux•linux_kernel

    ≤ 4.2.3

  • oracle•vm_virtualbox

    ≥ 4.0.0, ≤ 4.0.34 | ≥ 4.1.0, ≤ 4.1.42 | ≥ 4.2.0, ≤ 4.2.34 | ≥ 4.3.0, ≤ 4.3.29 | ≥ 5.0.0, ≤ 5.0.8

  • xen•xen

    4.3.0 | 4.3.1 | 4.3.2 | 4.3.3 | 4.3.4 | 4.4.0 | 4.4.1 | 4.4.2 | 4.4.3 | 4.4.4 | 4.5.0 | 4.5.1 | 4.5.2 | 4.5.3 | 4.5.5 | 4.6.0 | 4.6.1 | 4.6.2 | 4.6.3 | 4.6.4 | 4.6.5 | 4.6.6

References (38)