CVE

Id
85248  
CVE No.
CVE-2015-7971  
Status
Candidate  
Description
Xen 3.2.x through 4.6.x does not limit the number of printk console messages when logging certain pmu and profiling hypercalls, which allows local guests to cause a denial of service via a sequence of crafted (1) HYPERCALL_xenoprof_op hypercalls, which are not properly handled in the do_xenoprof_op function in common/xenoprof.c, or (2) HYPERVISOR_xenpmu_op hypercalls, which are not properly handled in the do_xenpmu_op function in arch/x86/cpu/vpmu.c.  
Phase
Assigned (20151023)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
751967 85248 CVE-2015-7971 CONFIRM:http://xenbits.xen.org/xsa/advisory-152.html  View
751968 85248 CVE-2015-7971 CONFIRM:http://support.citrix.com/article/CTX202404  View
751969 85248 CVE-2015-7971 DEBIAN:DSA-3414  View
751970 85248 CVE-2015-7971 URL:http://www.debian.org/security/2015/dsa-3414  View
751971 85248 CVE-2015-7971 FEDORA:FEDORA-2015-242be2c240  View
751972 85248 CVE-2015-7971 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171249.html  View
751973 85248 CVE-2015-7971 FEDORA:FEDORA-2015-6f6b79efe2  View
751974 85248 CVE-2015-7971 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171185.html  View
751975 85248 CVE-2015-7971 FEDORA:FEDORA-2015-a931b02be2  View
751976 85248 CVE-2015-7971 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171082.html  View
751977 85248 CVE-2015-7971 SUSE:openSUSE-SU-2015:1965  View
751978 85248 CVE-2015-7971 URL:http://lists.opensuse.org/opensuse-updates/2015-11/msg00063.html  View
751979 85248 CVE-2015-7971 BID:77363  View
751980 85248 CVE-2015-7971 URL:http://www.securityfocus.com/bid/77363  View
751981 85248 CVE-2015-7971 SECTRACK:1034035  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
10667 JVNDB-2015-005987 strongSwan の eap-mschapv2 プラグインの EAP-MSCHAPv2 プロトコルのサーバの実装における認証を回避される脆弱性 strongSwan の eap-mschapv2 プラグインの EAP-MSCHAPv2 プロトコルのサーバの実装は、ローカルステートを適切に検証しないため、認証を回避される脆弱性が存在します。 CVE-2015-8023 85248 5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005987.html  View