CVE

Id
85247  
CVE No.
CVE-2015-7970  
Status
Candidate  
Description
The p2m_pod_emergency_sweep function in arch/x86/mm/p2m-pod.c in Xen 3.4.x, 3.5.x, and 3.6.x is not preemptible, which allows local x86 HVM guest administrators to cause a denial of service (CPU consumption and possibly reboot) via crafted memory contents that triggers a "time-consuming linear scan," related to Populate-on-Demand.  
Phase
Assigned (20151023)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
751952 85247 CVE-2015-7970 CONFIRM:http://xenbits.xen.org/xsa/advisory-150.html  View
751953 85247 CVE-2015-7970 CONFIRM:http://support.citrix.com/article/CTX202404  View
751954 85247 CVE-2015-7970 DEBIAN:DSA-3414  View
751955 85247 CVE-2015-7970 URL:http://www.debian.org/security/2015/dsa-3414  View
751956 85247 CVE-2015-7970 FEDORA:FEDORA-2015-242be2c240  View
751957 85247 CVE-2015-7970 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171249.html  View
751958 85247 CVE-2015-7970 FEDORA:FEDORA-2015-6f6b79efe2  View
751959 85247 CVE-2015-7970 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171185.html  View
751960 85247 CVE-2015-7970 FEDORA:FEDORA-2015-a931b02be2  View
751961 85247 CVE-2015-7970 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171082.html  View
751962 85247 CVE-2015-7970 SUSE:openSUSE-SU-2015:2250  View
751963 85247 CVE-2015-7970 URL:http://lists.opensuse.org/opensuse-updates/2015-12/msg00053.html  View
751964 85247 CVE-2015-7970 BID:77362  View
751965 85247 CVE-2015-7970 URL:http://www.securityfocus.com/bid/77362  View
751966 85247 CVE-2015-7970 SECTRACK:1034034  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
11910 JVNDB-2015-007230 複数の F5 製品の Configuration ユーティリティにおける権限を取得される脆弱性 複数の F5 製品の Configuration ユーティリティには、権限を取得される脆弱性が存在します。 CVE-2015-8022 85247 8.5 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-007230.html  View