CVE

Id
85615  
CVE No.
CVE-2015-8338  
Status
Candidate  
Description
Xen 4.6.x and earlier does not properly enforce limits on page order inputs for the (1) XENMEM_increase_reservation, (2) XENMEM_populate_physmap, (3) XENMEM_exchange, and possibly other HYPERVISOR_memory_op suboperations, which allows ARM guest OS administrators to cause a denial of service (CPU consumption, guest reboot, or watchdog timeout and host reboot) and possibly have unspecified other impact via unknown vectors.  
Phase
Assigned (20151125)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
753704 85615 CVE-2015-8338 CONFIRM:http://xenbits.xen.org/xsa/advisory-158.html  View
753705 85615 CVE-2015-8338 DEBIAN:DSA-3633  View
753706 85615 CVE-2015-8338 URL:http://www.debian.org/security/2016/dsa-3633  View
753707 85615 CVE-2015-8338 BID:78920  View
753708 85615 CVE-2015-8338 URL:http://www.securityfocus.com/bid/78920  View
753709 85615 CVE-2015-8338 SECTRACK:1034390  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
10750 JVNDB-2015-006070 PCRE におけるサービス運用妨害 (DoS) の脆弱性 PCRE は、文字クラス内の [: and \ (2 バックスラッシュ) サブストリングを誤って処理するため、サービス運用妨害 (初期化されていないメモリの読み込み) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2015-8390 85615 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006070.html  View