CVE

Id
85246  
CVE No.
CVE-2015-7969  
Status
Candidate  
Description
Multiple memory leaks in Xen 4.0 through 4.6.x allow local guest administrators or domains with certain permission to cause a denial of service (memory consumption) via a large number of "teardowns" of domains with the vcpu pointer array allocated using the (1) XEN_DOMCTL_max_vcpus hypercall or the xenoprofile state vcpu pointer array allocated using the (2) XENOPROF_get_buffer or (3) XENOPROF_set_passive hypercall.  
Phase
Assigned (20151023)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
751936 85246 CVE-2015-7969 CONFIRM:http://xenbits.xen.org/xsa/advisory-149.html  View
751937 85246 CVE-2015-7969 CONFIRM:http://xenbits.xen.org/xsa/advisory-151.html  View
751938 85246 CVE-2015-7969 CONFIRM:http://support.citrix.com/article/CTX202404  View
751939 85246 CVE-2015-7969 DEBIAN:DSA-3414  View
751940 85246 CVE-2015-7969 URL:http://www.debian.org/security/2015/dsa-3414  View
751941 85246 CVE-2015-7969 FEDORA:FEDORA-2015-242be2c240  View
751942 85246 CVE-2015-7969 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171249.html  View
751943 85246 CVE-2015-7969 FEDORA:FEDORA-2015-6f6b79efe2  View
751944 85246 CVE-2015-7969 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171185.html  View
751945 85246 CVE-2015-7969 FEDORA:FEDORA-2015-a931b02be2  View
751946 85246 CVE-2015-7969 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171082.html  View
751947 85246 CVE-2015-7969 SUSE:openSUSE-SU-2015:1965  View
751948 85246 CVE-2015-7969 URL:http://lists.opensuse.org/opensuse-updates/2015-11/msg00063.html  View
751949 85246 CVE-2015-7969 BID:77364  View
751950 85246 CVE-2015-7969 URL:http://www.securityfocus.com/bid/77364  View
751951 85246 CVE-2015-7969 SECTRACK:1034033  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
11729 JVNDB-2015-007049 複数の F5 BIG-IP 製品の Configuration ユーティリティにおけるファイルをアップロードされる脆弱性 複数の F5 BIG-IP 製品の Configuration ユーティリティには、不完全なブラックリストにより、ファイルをアップロードされる脆弱性が存在します。 CVE-2015-8021 85246 4 4.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-007049.html  View