CVE-2015-8338

Description

Xen 4.6.x and earlier does not properly enforce limits on page order inputs for the (1) XENMEM_increase_reservation, (2) XENMEM_populate_physmap, (3) XENMEM_exchange, and possibly other HYPERVISOR_memory_op suboperations, which allows ARM guest OS administrators to cause a denial of service (CPU consumption, guest reboot, or watchdog timeout and host reboot) and possibly have unspecified other impact via unknown vectors.

CVSS Metrics

• v2.0•HIGH•Score: 7.2AV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS Trends

Current EPSS score: 0.20%• Percentile: 42%

Techniques & Countermeasures

• CWE-254•7PK - Security Features

  Software security is not security software. Here we're concerned with topics like authentication, access control, confidentiality, cryptography, and privilege management.

Affected Systems

• xen•xen

  ≤ 4.6.0

References (4)

• http://www.securityfocus.com/bid/78920
• http://xenbits.xen.org/xsa/advisory-158.html
• http://www.securitytracker.com/id/1034390
• http://www.debian.org/security/2016/dsa-3633