CVEvulnerability
CVE-2015-2151
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-03-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
The x86 emulator in Xen 3.2.x through 4.5.x does not properly ignore segment overrides for instructions with register operands, which allows local guest users to obtain sensitive information, cause a denial of service (memory corruption), or possibly execute arbitrary code via unspecified vectors.
Affected configurations
• fedoraproject fedora 20
• fedoraproject fedora 21
• fedoraproject fedora 22
• debian debian linux 7.0
• xen xen 3.2.0
• xen xen 3.2.1
• xen xen 3.2.2
• xen xen 3.2.3
• xen xen 3.3.0
• xen xen 3.3.1
• xen xen 3.3.2
• xen xen 3.4.0
• xen xen 3.4.1
• xen xen 3.4.2
• xen xen 3.4.3
• xen xen 3.4.4
• xen xen 4.0.0
• xen xen 4.0.1
• xen xen 4.0.2
• xen xen 4.0.3
• xen xen 4.0.4
• xen xen 4.1.0
• xen xen 4.1.1
• xen xen 4.1.2
• xen xen 4.1.3
• xen xen 4.1.4
• xen xen 4.1.5
• xen xen 4.1.6.1
• xen xen 4.2.0
• xen xen 4.2.1
• xen xen 4.2.2
• xen xen 4.2.3
• xen xen 4.3.0
• xen xen 4.3.1
• xen xen 4.4.0
• xen xen 4.4.1
• xen xen 4.5.0
Related
Weakness · not in database (1)
References
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761 kb.juniper.net
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152483.html Third Party Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152588.html Third Party Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152776.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00014.html lists.opensuse.org
- http://support.citrix.com/article/CTX200484 support.citrix.com
- http://www.debian.org/security/2015/dsa-3181 Third Party Advisory
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html www.oracle.com
- http://www.securityfocus.com/bid/73015 www.securityfocus.com
- http://www.securitytracker.com/id/1031806 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1031903 Third Party Advisory, VDB Entry
- http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-423503.htm www1.huawei.com
- http://xenbits.xen.org/xsa/advisory-123.html Patch, Vendor Advisory
- https://security.gentoo.org/glsa/201604-03 security.gentoo.org
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761 kb.juniper.net
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152483.html Third Party Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152588.html Third Party Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152776.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00014.html lists.opensuse.org
- http://support.citrix.com/article/CTX200484 support.citrix.com
- http://www.debian.org/security/2015/dsa-3181 Third Party Advisory
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html www.oracle.com
- http://www.securityfocus.com/bid/73015 www.securityfocus.com
- http://www.securitytracker.com/id/1031806 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1031903 Third Party Advisory, VDB Entry
- http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-423503.htm www1.huawei.com
- http://xenbits.xen.org/xsa/advisory-123.html Patch, Vendor Advisory
- https://security.gentoo.org/glsa/201604-03 security.gentoo.org