NVD

Id
26499  
Name
CVE-2015-5307  
Description
The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic or hang) by triggering many #AC (aka Alignment Check) exceptions, related to svm.c and vmx.c.  
Reject
 
CVSS Version
2  
CVSS Score
4.9  
Severity
Medium  
CVSS Base Score
4.9  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-05-27  
Published
2015-11-16  
Modified Date
2017-05-23  
Seq
2015-5307  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
140180 26499 CVE-2015-5307 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=54a20552e1eae07aa240fa370a0293e006b5faed  View
140181 26499 CVE-2015-5307 FEDORA-2015-f150b2a8c8  View
140182 26499 CVE-2015-5307 FEDORA-2015-668d213dc3  View
140183 26499 CVE-2015-5307 FEDORA-2015-394835a3f6  View
140184 26499 CVE-2015-5307 SUSE-SU-2015:2108  View
140185 26499 CVE-2015-5307 SUSE-SU-2015:2194  View
140186 26499 CVE-2015-5307 SUSE-SU-2015:2339  View
140187 26499 CVE-2015-5307 SUSE-SU-2015:2350  View
140188 26499 CVE-2015-5307 SUSE-SU-2016:0354  View
140189 26499 CVE-2015-5307 SUSE-SU-2016:2074  View
140190 26499 CVE-2015-5307 openSUSE-SU-2015:2232  View
140191 26499 CVE-2015-5307 openSUSE-SU-2015:2250  View
140192 26499 CVE-2015-5307 RHSA-2015:2636  View
140193 26499 CVE-2015-5307 RHSA-2015:2645  View
140194 26499 CVE-2015-5307 RHSA-2016:0046  View
140195 26499 CVE-2015-5307 http://support.citrix.com/article/CTX202583  View
140196 26499 CVE-2015-5307 DSA-3396  View
140197 26499 CVE-2015-5307 DSA-3414  View
140198 26499 CVE-2015-5307 DSA-3454  View
140199 26499 CVE-2015-5307 [oss-security] 20151110 Re: CVE-2015-5307 kernel: kvm: guest to host DoS by triggering an infinite loop in microcode via #AC exception  View
140200 26499 CVE-2015-5307 http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html  View
140201 26499 CVE-2015-5307 http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html  View
140202 26499 CVE-2015-5307 http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html  View
140203 26499 CVE-2015-5307 http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html  View
140204 26499 CVE-2015-5307 77528  View
140205 26499 CVE-2015-5307 1034105  View
140206 26499 CVE-2015-5307 USN-2800-1  View
140207 26499 CVE-2015-5307 USN-2801-1  View
140208 26499 CVE-2015-5307 USN-2802-1  View
140209 26499 CVE-2015-5307 USN-2803-1  View
140210 26499 CVE-2015-5307 USN-2804-1  View
140211 26499 CVE-2015-5307 USN-2805-1  View
140212 26499 CVE-2015-5307 USN-2806-1  View
140213 26499 CVE-2015-5307 USN-2807-1  View
140214 26499 CVE-2015-5307 http://xenbits.xen.org/xsa/advisory-156.html  View
140215 26499 CVE-2015-5307 https://bugzilla.redhat.com/show_bug.cgi?id=1277172  View
140216 26499 CVE-2015-5307 https://github.com/torvalds/linux/commit/54a20552e1eae07aa240fa370a0293e006b5faed  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
10613 JVNDB-2015-005933 Linux Kernel の KVM サブシステムおよび Xen におけるサービス運用妨害 (DoS) の脆弱性 Linux Kernel の KVM サブシステム、および Xen には、svm.c および vmx.c に関する処理に不備があるため、サービス運用妨害 (ホスト OS パニックまたはハング) 状態にされる脆弱性が存在します。 CVE-2015-5307 82532 CVE-2015-5307 26499 4.9 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005933.html 2015-11-04 2016-01-28 View