CVE

Id
85827  
CVE No.
CVE-2015-8550  
Status
Candidate  
Description
Xen, when used on a system providing PV backends, allows local guest OS administrators to cause a denial of service (host OS crash) or gain privileges by writing to memory shared between the frontend and backend, aka a double fetch vulnerability.  
Phase
Assigned (20151214)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
755191 85827 CVE-2015-8550 CONFIRM:http://xenbits.xen.org/xsa/advisory-155.html  View
755192 85827 CVE-2015-8550 CONFIRM:http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html  View
755193 85827 CVE-2015-8550 DEBIAN:DSA-3519  View
755194 85827 CVE-2015-8550 URL:http://www.debian.org/security/2016/dsa-3519  View
755195 85827 CVE-2015-8550 SUSE:SUSE-SU-2016:1764  View
755196 85827 CVE-2015-8550 URL:http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00005.html  View
755197 85827 CVE-2015-8550 SUSE:SUSE-SU-2016:0911  View
755198 85827 CVE-2015-8550 URL:http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00094.html  View
755199 85827 CVE-2015-8550 SUSE:SUSE-SU-2016:1102  View
755200 85827 CVE-2015-8550 URL:http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00045.html  View
755201 85827 CVE-2015-8550 BID:79592  View
755202 85827 CVE-2015-8550 URL:http://www.securityfocus.com/bid/79592  View
755203 85827 CVE-2015-8550 SECTRACK:1034479  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
11162 JVNDB-2015-006482 Drupal 用 Token Insert Entity モジュールにおけるアクセス制限を回避される脆弱性 Drupal 用 Token Insert Entity モジュールは、権限を適切にチェックしないため、アクセス制限を回避され、重要な情報を取得される脆弱性が存在します。 CVE-2015-8602 85827 3.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006482.html  View