CVE

Id
85249  
CVE No.
CVE-2015-7972  
Status
Candidate  
Description
The (1) libxl_set_memory_target function in tools/libxl/libxl.c and (2) libxl__build_post function in tools/libxl/libxl_dom.c in Xen 3.4.x through 4.6.x do not properly calculate the balloon size when using the populate-on-demand (PoD) system, which allows local HVM guest users to cause a denial of service (guest crash) via unspecified vectors related to "heavy memory pressure."  
Phase
Assigned (20151023)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
751982 85249 CVE-2015-7972 CONFIRM:http://xenbits.xen.org/xsa/advisory-153.html  View
751983 85249 CVE-2015-7972 CONFIRM:http://support.citrix.com/article/CTX202404  View
751984 85249 CVE-2015-7972 DEBIAN:DSA-3414  View
751985 85249 CVE-2015-7972 URL:http://www.debian.org/security/2015/dsa-3414  View
751986 85249 CVE-2015-7972 FEDORA:FEDORA-2015-242be2c240  View
751987 85249 CVE-2015-7972 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171249.html  View
751988 85249 CVE-2015-7972 FEDORA:FEDORA-2015-6f6b79efe2  View
751989 85249 CVE-2015-7972 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171185.html  View
751990 85249 CVE-2015-7972 FEDORA:FEDORA-2015-a931b02be2  View
751991 85249 CVE-2015-7972 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-November/171082.html  View
751992 85249 CVE-2015-7972 SUSE:openSUSE-SU-2015:1965  View
751993 85249 CVE-2015-7972 URL:http://lists.opensuse.org/opensuse-updates/2015-11/msg00063.html  View
751994 85249 CVE-2015-7972 BID:77365  View
751995 85249 CVE-2015-7972 URL:http://www.securityfocus.com/bid/77365  View
751996 85249 CVE-2015-7972 SECTRACK:1034036  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
10756 JVNDB-2015-006076 McAfee SIEM 製品における認証を回避される脆弱性 McAfee Enterprise Security Manager (ESM)、Enterprise Security Manager/Log Manager (ESMLM)、および Enterprise Security Manager/Receiver (ESMREC) には、Active Directory または LDAP 認証ソースの使用を設定されている場合、認証を回避される脆弱性が存在します。 CVE-2015-8024 85249 9.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006076.html  View