NVD

Id
24295  
Name
CVE-2015-2151  
Description
The x86 emulator in Xen 3.2.x through 4.5.x does not properly ignore segment overrides for instructions with register operands, which allows local guest users to obtain sensitive information, cause a denial of service (memory corruption), or possibly execute arbitrary code via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-03-12  
Modified Date
2017-01-02  
Seq
2015-2151  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
128573 24295 CVE-2015-2151 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10761  View
128574 24295 CVE-2015-2151 FEDORA-2015-3935  View
128575 24295 CVE-2015-2151 FEDORA-2015-3721  View
128576 24295 CVE-2015-2151 FEDORA-2015-3944  View
128577 24295 CVE-2015-2151 openSUSE-SU-2015:0732  View
128578 24295 CVE-2015-2151 http://support.citrix.com/article/CTX200484  View
128579 24295 CVE-2015-2151 DSA-3181  View
128580 24295 CVE-2015-2151 http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html  View
128581 24295 CVE-2015-2151 73015  View
128582 24295 CVE-2015-2151 1031806  View
128583 24295 CVE-2015-2151 1031903  View
128584 24295 CVE-2015-2151 http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-423503.htm  View
128585 24295 CVE-2015-2151 http://xenbits.xen.org/xsa/advisory-123.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
6467 JVNDB-2015-001787 Xen の x86 エミュレータにおける重要な情報を取得される脆弱性 Xen の x86 エミュレータは、レジスタオペランドを伴う手順のセグメントオーバーライドを適切に無視しないため、重要な情報を取得される、サービス運用妨害 (メモリ破損) 状態にされる、または任意のコードを実行される脆弱性が存在します。 CVE-2015-2151 79376 CVE-2015-2151 24295 7.2 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001787.html 2015-03-10 2015-03-13 View