CVEvulnerability

CVE-2015-8104

10.0 CRITICAL Published 2015-11-16 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-11-16
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
10.0 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS 2.0 ([email protected])
4.7 MEDIUM — AV:L/AC:M/Au:N/C:N/I:N/A:C
Weaknesses
CWE-399

Description

The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic or hang) by triggering many #DB (aka Debug) exceptions, related to svm.c.

Affected configurations

• xen xen 4.3.0 • xen xen 4.3.1 • xen xen 4.3.2 • xen xen 4.3.3 • xen xen 4.3.4 • xen xen 4.4.0 • xen xen 4.4.1 • xen xen 4.4.2 • xen xen 4.4.3 • xen xen 4.5.0 • xen xen 4.5.1 • xen xen 4.5.2 • xen xen 4.6.0 • xen xen 4.6.1 • xen xen 4.6.2 • xen xen 4.6.4 • xen xen 4.6.5 • oracle solaris 11.3 • oracle vm virtualbox (>= 4.0.0 <= 4.0.34) • oracle vm virtualbox (>= 4.1.0 <= 4.1.42) • oracle vm virtualbox (>= 4.2.0 <= 4.2.34) • oracle vm virtualbox (>= 4.3.0 <= 4.3.35) • oracle vm virtualbox (>= 5.0.0 <= 5.0.13) • linux linux kernel (<= 4.2.3) • debian debian linux 7.0 • debian debian linux 8.0 • debian debian linux 9.0 • canonical ubuntu linux 12.04 • canonical ubuntu linux 14.04 • canonical ubuntu linux 15.04

Related

Weakness · not in database (1)

References