NVD

Id
28675  
Name
CVE-2015-8554  
Description
Buffer overflow in hw/pt-msi.c in Xen 4.6.x and earlier, when using the qemu-xen-traditional (aka qemu-dm) device model, allows local x86 HVM guest administrators to gain privileges by leveraging a system with access to a passed-through MSI-X capable physical PCI device and MSI-X table entries, related to a "write path."  
Reject
 
CVSS Version
2  
CVSS Score
6.6  
Severity
Medium  
CVSS Base Score
6.6  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
2.7  
CVSS Vector
(AV:L/AC:M/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-04-14  
Modified Date
2016-09-08  
Seq
2015-8554  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
150822 28675 CVE-2015-8554 http://support.citrix.com/article/CTX203879  View
150823 28675 CVE-2015-8554 http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html  View
150824 28675 CVE-2015-8554 79579  View
150825 28675 CVE-2015-8554 1034481  View
150826 28675 CVE-2015-8554 http://xenbits.xen.org/xsa/advisory-164.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11763 JVNDB-2015-007083 Xen の hw/pt-msi.c におけるバッファオーバーフローの脆弱性 Xen の hw/pt-msi.c には、qemu-xen-traditional (別名 qemu-dm) デバイスモデルを使用する場合、"パスの書き込み (write path)" に関する処理に不備があるため、バッファオーバーフローの脆弱性が存在します。 CVE-2015-8554 85779 CVE-2015-8554 28675 6.6 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-007083.html 2015-12-17 2016-04-21 View