CVE

Id
79429  
CVE No.
CVE-2015-2152  
Status
Candidate  
Description
Xen 4.5.x and earlier enables certain default backends when emulating a VGA device for an x86 HVM guest qemu even when the configuration disables them, which allows local guest users to obtain access to the VGA console by (1) setting the DISPLAY environment variable, when compiled with SDL support, or connecting to the VNC server on (2) ::1 or (3) 127.0.0.1, when not compiled with SDL support.  
Phase
Assigned (20150228)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
721914 79429 CVE-2015-2152 CONFIRM:http://xenbits.xen.org/xsa/advisory-119.html  View
721915 79429 CVE-2015-2152 FEDORA:FEDORA-2015-3721  View
721916 79429 CVE-2015-2152 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152588.html  View
721917 79429 CVE-2015-2152 FEDORA:FEDORA-2015-3935  View
721918 79429 CVE-2015-2152 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152483.html  View
721919 79429 CVE-2015-2152 FEDORA:FEDORA-2015-3944  View
721920 79429 CVE-2015-2152 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-March/152776.html  View
721921 79429 CVE-2015-2152 GENTOO:GLSA-201504-04  View
721922 79429 CVE-2015-2152 URL:https://security.gentoo.org/glsa/201504-04  View
721923 79429 CVE-2015-2152 SUSE:openSUSE-SU-2015:0732  View
721924 79429 CVE-2015-2152 URL:http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00014.html  View
721925 79429 CVE-2015-2152 BID:73068  View
721926 79429 CVE-2015-2152 URL:http://www.securityfocus.com/bid/73068  View
721927 79429 CVE-2015-2152 SECTRACK:1031919  View
721928 79429 CVE-2015-2152 URL:http://www.securitytracker.com/id/1031919  View
721929 79429 CVE-2015-2152 SECTRACK:1031806  View

Related JVN